@noy-db/hub 0.4.0-pre.9 → 0.5.0

package/dist/index.d.ts

@@ -99,12 +99,12 @@ export type { CollectionMeta, VaultMeta } from './with-shape/introspection/meta.
 export type { CollectionDescription, DescribedField, DescribeOptions } from './with-shape/introspection/describe.js';
 export { applyListProjection, type ListProjectionOptions } from './with-shape/introspection/projection.js';
 export type { DryRunResult, AffectedDocument, GuardViolation } from './with-commit/tx/dry-run.js';
-export type { TabRole, TabPresence, TabCoordinationOptions, TabLockManager, TabChannel } from './with-party/tab-coordination.js';
+export type { TabRole, TabPresence, TabCoordinationOptions, TabLockManager, TabChannel } from './with-sync/tab-coordination.js';
 export type { WriteConflict } from './kernel/types.js';
 export type { SchemaDelta, FieldChange, UpdateContext, UpdateDecision, SchemaUpdateStrategy, } from './with-shape/schema-update/index.js';
 export { blindUpdate, additiveOnly, lockSchema, coordinatedCutover } from './with-shape/schema-update/index.js';
 export type { FenceState, FenceDoc } from './with-shape/schema-update/fence.js';
-export type { SyncPolicy, PushPolicy, PullPolicy, PushMode, PullMode, SyncSchedulerStatus } from './kernel/sync-policy.js';
+export type { SyncPolicy, PushPolicy, PullPolicy, PushMode, PullMode, SyncSchedulerStatus, ReadinessState } from './kernel/sync-policy.js';
 export { SyncScheduler, INDEXED_STORE_POLICY, POD_STORE_POLICY, BUNDLE_STORE_POLICY } from './kernel/sync-policy.js';
 export type { SyncTarget, SyncTargetRole } from './kernel/types.js';
 export { memoryStore } from './kernel/memory-store.js';
@@ -112,7 +112,7 @@ export { routeStore } from './with-store/route-store.js';
 export type { RouteStoreOptions, RoutedNoydbStore, BlobStoreRoute, AgeRoute, BlobLifecyclePolicy, OverrideTarget, OverrideOptions, SuspendOptions, RouteStatus, } from './with-store/route-store.js';
 export { wrapStore, withRetry, withLogging, withMetrics, withCircuitBreaker, withCache, withHealthCheck } from './with-store/store-middleware.js';
 export type { StoreMiddleware, RetryOptions, LoggingOptions, LogLevel, MetricsOptions, StoreOperation, CircuitBreakerOptions, StoreCacheOptions, HealthCheckOptions, } from './with-store/store-middleware.js';
-export { NoydbError, DecryptionError, TamperedError, InvalidKeyError, KeyringCorruptError, NoAccessError, ReadOnlyError, PermissionDeniedError, PrivilegeEscalationError, StoreCapabilityError, ConflictError, NetworkError, NotFoundError, ValidationError, SchemaValidationError, GroupCardinalityError, BackupLedgerError, BackupCorruptedError, JoinTooLargeError, CrossJoinTooLargeError, CrossJoinSourceUnknownError, DanglingReferenceError, FilenameSanitizationError, PathEscapeError, ElevationExpiredError, AlreadyElevatedError, LedgerContentionError, SequenceContentionError, SequenceOfflineError, SequenceNotEnabledError, BundleIntegrityError, BundleSealMismatchError, PodVersionConflictError, BundleVersionConflictError, SessionExpiredError, SessionNotFoundError, SessionPolicyError, ExportCapabilityError, ImportCapabilityError, KeyringExpiredError, ReadOnlyAtInstantError, ReadOnlyFrameError, RecordLockedError, FieldFrozenError, IllegalTransitionError, InvariantError, AmendmentForbiddenError, AttestationError, AttestationNotEnabledError, ClassifiedNotEnabledError, TiersNotEnabledError, PortabilityNotEnabledError, SchemaUpdateError, NonAdditiveSchemaChangeError, SchemaLockedError, SchemaFenceError, MigrationRequiredError, QuiesceTimeoutError, } from './kernel/errors.js';
+export { NoydbError, DecryptionError, TamperedError, InvalidKeyError, KeyringCorruptError, NoAccessError, ReadOnlyError, PermissionDeniedError, PrivilegeEscalationError, StoreCapabilityError, ConflictError, isConflictError, NetworkError, NotFoundError, ValidationError, SchemaValidationError, GroupCardinalityError, BackupLedgerError, BackupCorruptedError, JoinTooLargeError, CrossJoinTooLargeError, CrossJoinSourceUnknownError, DanglingReferenceError, FilenameSanitizationError, PathEscapeError, ElevationExpiredError, AlreadyElevatedError, LedgerContentionError, SequenceContentionError, SequenceOfflineError, SequenceNotEnabledError, BundleIntegrityError, BundleSealMismatchError, PodVersionConflictError, BundleVersionConflictError, SessionExpiredError, SessionNotFoundError, SessionPolicyError, ExportCapabilityError, ImportCapabilityError, KeyringExpiredError, ReadOnlyAtInstantError, ReadOnlyFrameError, RecordLockedError, FieldFrozenError, IllegalTransitionError, InvariantError, AmendmentForbiddenError, AttestationError, AttestationNotEnabledError, ClassifiedNotEnabledError, TiersNotEnabledError, PortabilityNotEnabledError, SchemaUpdateError, NonAdditiveSchemaChangeError, SchemaLockedError, SchemaFenceError, MigrationRequiredError, QuiesceTimeoutError, } from './kernel/errors.js';
 export { SnapshotNotFoundError } from './kernel/errors.js';
 export type { SnapshotMeta, RetentionPolicy } from './with-fork/snapshots/strategy.js';
 export { withArchive } from './with-fork/archive/index.js';
@@ -215,11 +215,11 @@ export { Collection } from './kernel/collection.js';
 export type { CacheOptions, CacheStats, CollectionChangeEvent } from './kernel/collection.js';
 export type { CrdtMode, CrdtState, LwwMapState, RgaState, YjsState } from './with-commit/crdt/crdt.js';
 export { resolveCrdtSnapshot, mergeCrdtStates } from './with-commit/crdt/crdt.js';
-export { PresenceHandle } from './with-party/team/presence.js';
+export { PresenceHandle } from './with-sync/presence.js';
 export type { PresencePeer } from './kernel/types.js';
 export { derivePresenceKey } from './kernel/enclave/index.js';
-export { SyncEngine } from './with-party/team/sync.js';
-export { SyncTransaction } from './with-party/team/sync-transaction.js';
+export { SyncEngine } from './with-sync/engine.js';
+export { SyncTransaction } from './with-sync/transaction.js';
 export { TxContext, TxVault, TxCollection, runTransaction } from './with-commit/tx/transaction.js';
 export type { TxOp } from './kernel/types.js';
 export type { TransactionInvariant } from './with-commit/tx/invariants.js';
@@ -271,8 +271,8 @@ export { lookup, dict, enumOf, enum } from './via/lookup/index.js';
 export { UnknownLookupKeyError, RestrictRefUnresolvableError } from './kernel/errors.js';
 export type { LookupDescriptor, Vocabulary, OnDelete } from './via/lookup/index.js';
 export type { LocaleReadOptions } from './kernel/types.js';
-export { putCredential, getCredential, deleteCredential, listCredentials, credentialStatus, SYNC_CREDENTIALS_COLLECTION, } from './with-party/team/sync-credentials.js';
-export type { SyncCredential } from './with-party/team/sync-credentials.js';
+export { putCredential, getCredential, deleteCredential, listCredentials, credentialStatus, SYNC_CREDENTIALS_COLLECTION, } from './with-sync/credentials.js';
+export type { SyncCredential } from './with-sync/credentials.js';
 export { PolicyEnforcer, createEnforcer, validateSessionPolicy } from './with-party/session/session-policy.js';
 export { createSession, resolveSession, revokeSession, revokeAllSessions, isSessionAlive, activeSessionCount, } from './with-party/session/session.js';
 export type { SessionToken, CreateSessionResult, CreateSessionOptions, } from './with-party/session/session.js';

package/dist/index.js

@@ -16,32 +16,46 @@ import {
   refArray,
   via,
   withArchive
-} from "./chunk-OW5Y6HA6.js";
-import "./chunk-NJ4DYYO5.js";
+} from "./chunk-5UKUOMO6.js";
+import "./chunk-F5UWVF6Z.js";
 import {
   persistSchemaIfNeeded
-} from "./chunk-FO6RNKKW.js";
+} from "./chunk-AJAOXFCF.js";
 import {
   LinkEndpointError
-} from "./chunk-HFUAFR6B.js";
+} from "./chunk-XID22NOA.js";
 import {
   LinkIntegrityError,
   isLinkCollectionName
-} from "./chunk-4JQK3L4V.js";
-import "./chunk-SHEEBRZ4.js";
+} from "./chunk-EBETHILL.js";
+import "./chunk-FT5Y4VSP.js";
 import {
   ComputedFieldError,
   evalComputedFields
-} from "./chunk-5DRROK5W.js";
+} from "./chunk-BFG7LD6Z.js";
+import "./chunk-GYGLAVCX.js";
 import {
   WithdrawalRequestError,
   approveWithdrawal,
   listWithdrawalRequests,
   rejectWithdrawal,
   requestWithdrawal
-} from "./chunk-JYV4JJV2.js";
-import "./chunk-6M2I3DKF.js";
-import "./chunk-CCDP6EPB.js";
+} from "./chunk-NG4AQIYJ.js";
+import "./chunk-WK7ULBTP.js";
+import "./chunk-6RDTG6E5.js";
+import {
+  MoneyCurrencyError,
+  MoneyPrecisionError,
+  MoneyUnsupportedError,
+  allocate,
+  asMoney,
+  isMoneyDescriptor,
+  isMoneyString,
+  money,
+  moneyNumber,
+  mulRate,
+  scaleForCurrency
+} from "./chunk-OKRXXFZZ.js";
 import {
   COVER_FIELDS,
   DEFAULT_COVER_SCHEMA,
@@ -52,7 +66,7 @@ import {
   blindUpdate,
   coordinatedCutover,
   lockSchema
-} from "./chunk-E23UGFVC.js";
+} from "./chunk-XVK7TULT.js";
 import "./chunk-6LJY7X5A.js";
 import "./chunk-DSDXAKIP.js";
 import {
@@ -62,42 +76,52 @@ import {
   checkGate,
   describeGate,
   mergePolicy
-} from "./chunk-FMNU7IUG.js";
+} from "./chunk-ODCEOSJF.js";
 import "./chunk-GJW4HX2O.js";
 import {
   UserApi
-} from "./chunk-3XKESW5E.js";
-import "./chunk-GYGLAVCX.js";
-import "./chunk-6R6Q3MRN.js";
-import "./chunk-BLBAQRBM.js";
+} from "./chunk-SL3PLML2.js";
+import {
+  classified,
+  luhnCheck
+} from "./chunk-KJNMTE2W.js";
+import {
+  ClassifiedNeverStoredError,
+  ClassifiedValidationError,
+  isClassifiedFieldSpec,
+  isClassifiedGroup,
+  resolveClassifiedFields
+} from "./chunk-7P4LL3JH.js";
+import "./chunk-QITP2JGX.js";
+import "./chunk-NIKQQXI2.js";
 import {
   decryptExtractedPartition,
   diffVault,
   withCargo
-} from "./chunk-2NMEGSFV.js";
+} from "./chunk-MDRCEA56.js";
 import {
   NO_CARGO
-} from "./chunk-TG634KCO.js";
-import "./chunk-BYFXLDVV.js";
+} from "./chunk-QTMZDMJ6.js";
+import "./chunk-TJOUKMWF.js";
 import {
   createDeedOwner,
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "./chunk-TIVK6PRK.js";
+} from "./chunk-GTQF32TP.js";
 import {
   MemoryRecipientSealer,
   MemorySealingKeyProvider,
   aesGcmOpen,
   parseRsaOaepTlv,
   sealRsaOaepTlv
-} from "./chunk-OLIWCCFM.js";
+} from "./chunk-CLE3TMIS.js";
 import {
   withdrawAccessibleData
-} from "./chunk-TE6LH6J2.js";
+} from "./chunk-G3ORJ3IQ.js";
 import {
   exportAccessibleData
-} from "./chunk-WO4T4OD5.js";
+} from "./chunk-J7YVY7TW.js";
 import {
   routeStore,
   withCache,
@@ -115,78 +139,76 @@ import "./chunk-VYYM3MEN.js";
 import {
   derivePersistedSchema,
   isZodSchema
-} from "./chunk-6ZNSB3H6.js";
+} from "./chunk-3LYMOSY7.js";
 import "./chunk-Y2NBBT6K.js";
 import {
   SCHEMAS_COLLECTION,
   loadPersistedSchema,
   savePersistedSchema
-} from "./chunk-OBPVWOSQ.js";
+} from "./chunk-Q6MXHDSE.js";
 import {
-  MoneyCurrencyError,
-  MoneyPrecisionError,
-  MoneyUnsupportedError,
-  allocate,
-  asMoney,
-  isMoneyDescriptor,
-  isMoneyString,
-  money,
-  moneyNumber,
-  mulRate,
-  scaleForCurrency
-} from "./chunk-SGDPRCC4.js";
+  CustodyApi,
+  NO_CUSTODY,
+  withCustody
+} from "./chunk-NMYH55MW.js";
 import {
   withDerivation,
   withRollup
-} from "./chunk-NYEFP7DY.js";
-import "./chunk-AT2JJEKJ.js";
-import "./chunk-4ZKNC6A6.js";
-import "./chunk-MHMLXJ3I.js";
+} from "./chunk-OKBNFUUX.js";
+import "./chunk-RM4FIXY2.js";
+import "./chunk-QQL6XPPG.js";
+import "./chunk-LXRVTJ5D.js";
 import {
   withMaterializedView
-} from "./chunk-MXUT7FTE.js";
-import "./chunk-FRMW23UK.js";
+} from "./chunk-4SG5TOXK.js";
+import "./chunk-653KOQ7A.js";
 import {
   buildLookupSnapshot
-} from "./chunk-GP3UWP22.js";
-import "./chunk-3HUYRN24.js";
-import "./chunk-IMRB2C4O.js";
+} from "./chunk-4MSNAB64.js";
+import "./chunk-W7C7MMIS.js";
+import "./chunk-IQ423YMK.js";
 import {
   withOverlayedView
-} from "./chunk-MSMJJB4J.js";
-import "./chunk-ZTLOXFPB.js";
-import "./chunk-IG6KUWBX.js";
-import "./chunk-EP5L47XV.js";
+} from "./chunk-PTSVGKSR.js";
+import "./chunk-Y2PTKKIN.js";
+import "./chunk-P6UIVLZK.js";
+import {
+  PresenceHandle,
+  SyncEngine,
+  SyncTransaction
+} from "./chunk-WFYKIDCS.js";
+import {
+  BUNDLE_STORE_POLICY,
+  INDEXED_STORE_POLICY,
+  POD_STORE_POLICY,
+  SyncScheduler
+} from "./chunk-55LKVALY.js";
 import {
   isDiscriminant
 } from "./chunk-PY4KJPYU.js";
-import "./chunk-5GQEU4DN.js";
+import "./chunk-IJV56FWY.js";
 import {
-  classified,
-  luhnCheck
-} from "./chunk-6L3DKWRY.js";
-import {
-  ClassifiedNeverStoredError,
-  ClassifiedValidationError,
-  isClassifiedFieldSpec,
-  isClassifiedGroup,
-  resolveClassifiedFields
-} from "./chunk-ZFUFAHZ3.js";
-import "./chunk-BN4HRYAZ.js";
-import "./chunk-N5PLUFH2.js";
+  CONSENT_AUDIT_COLLECTION
+} from "./chunk-IM2KST7E.js";
+import "./chunk-PEOZ34EM.js";
+import "./chunk-FUECZSRM.js";
+import "./chunk-F2WWHKO7.js";
 import "./chunk-GHVIKOHT.js";
+import {
+  PERIODS_COLLECTION
+} from "./chunk-SBGXQK5I.js";
 import {
   immutableGuard,
   transitionGuard,
   withGuard
-} from "./chunk-RO5NM6UI.js";
+} from "./chunk-MGXUAID4.js";
+import "./chunk-4TXO442D.js";
 import "./chunk-FQ5CHJR7.js";
 import "./chunk-JK733I5V.js";
-import "./chunk-W66AM5IB.js";
 import {
   CollectionFrame,
   VaultFrame
-} from "./chunk-55LX6FSX.js";
+} from "./chunk-NJHQE4LT.js";
 import "./chunk-SMY5X46Z.js";
 import "./chunk-DZFQVICS.js";
 import {
@@ -194,13 +216,13 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "./chunk-NGSJZFGL.js";
+} from "./chunk-NWK6SVBM.js";
 import "./chunk-5D2ALSM5.js";
 import {
   NO_SEARCH,
   tokenize,
   withSearch
-} from "./chunk-QADFHRQM.js";
+} from "./chunk-YA7Y3EZP.js";
 import {
   fuseRetrieval
 } from "./chunk-AURFOK3D.js";
@@ -210,28 +232,23 @@ import {
   compileSequenceFormat,
   resolveSequenceKey,
   withSequence
-} from "./chunk-EBKCYQ2D.js";
-import {
-  CustodyApi,
-  NO_CUSTODY,
-  withCustody
-} from "./chunk-SKM35Y4Q.js";
+} from "./chunk-RQILGK3N.js";
 import {
   DEFAULT_CROSS_JOIN_MAX_ROWS,
   Query,
   ScanBuilder,
   buildLiveQuery,
   executePlan
-} from "./chunk-WBKZUO5V.js";
+} from "./chunk-QMCWYN6O.js";
 import {
   DEFAULT_JOIN_MAX_ROWS,
   applyJoins
-} from "./chunk-V6UQZA2H.js";
+} from "./chunk-PKBONLCP.js";
 import {
   importExternalObjects,
   memoryObjectProjection
 } from "./chunk-4Q6HSHHL.js";
-import "./chunk-IF6WNGAK.js";
+import "./chunk-XX7YB5BI.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -248,8 +265,8 @@ import {
   getIntent,
   isPreCompressed,
   sweepBlobIntents
-} from "./chunk-NQSO4UAH.js";
-import "./chunk-L3YYLT4E.js";
+} from "./chunk-ELJOLQIG.js";
+import "./chunk-ALUVACKT.js";
 import {
   CollectionIndexes
 } from "./chunk-KPZS5QAQ.js";
@@ -261,7 +278,7 @@ import {
   estimateRecordBytes,
   parseBytes
 } from "./chunk-NO272T7Q.js";
-import "./chunk-KRCBZYTZ.js";
+import "./chunk-MFW466PX.js";
 import "./chunk-XZHEOSQ2.js";
 import "./chunk-YMUFFJCO.js";
 import "./chunk-CADUYBQD.js";
@@ -280,7 +297,7 @@ import {
   createPodStore,
   wrapBundleStore,
   wrapPodStore
-} from "./chunk-Y6B6HVKC.js";
+} from "./chunk-K5OFKXUG.js";
 import {
   NOYDB_BUNDLE_FORMAT_VERSION,
   NOYDB_BUNDLE_MAGIC,
@@ -293,7 +310,7 @@ import {
   readPodHeader,
   writeNoydbBundle,
   writePod
-} from "./chunk-SGQ4N5FS.js";
+} from "./chunk-KDWBVCIX.js";
 import {
   COVER_RECORD_ID,
   isCover,
@@ -301,21 +318,17 @@ import {
   readCover,
   saveCover,
   validateCoverInput
-} from "./chunk-JIDLU57U.js";
-import {
-  CONSENT_AUDIT_COLLECTION
-} from "./chunk-XIDQKFZF.js";
-import "./chunk-PEOZ34EM.js";
-import "./chunk-OLSARBZU.js";
+} from "./chunk-FHK6WWUE.js";
+import "./chunk-4DGBZEV6.js";
 import {
   dictKey,
   staticDict
-} from "./chunk-W3G5REIU.js";
+} from "./chunk-EAN4TAPC.js";
 import {
   DICT_COLLECTION_PREFIX,
   LookupHandle,
   dictCollectionName
-} from "./chunk-NEX7JCMO.js";
+} from "./chunk-MPW6AHTC.js";
 import {
   applyI18nLocale,
   enforceScript,
@@ -330,18 +343,13 @@ import {
   resolvePolicy,
   setAtPathInPlace,
   validateI18nTextValue
-} from "./chunk-UADPR6F4.js";
+} from "./chunk-5EKL6BXI.js";
 import {
   installViaBinder
-} from "./chunk-6UBZ6I5Z.js";
+} from "./chunk-DDB626I7.js";
 import {
-  credentialStatus,
-  deleteCredential,
-  getCredential,
-  listCredentials,
-  putCredential,
   withTeam
-} from "./chunk-SHYIA73K.js";
+} from "./chunk-US2AR4BI.js";
 import {
   MAGIC_LINK_GRANTS_COLLECTION,
   NO_TEAM,
@@ -369,32 +377,19 @@ import {
   unwrapDeksFromPaperEntry,
   unwrapMagicLinkGrant,
   writeMagicLinkGrant
-} from "./chunk-C25JXSOR.js";
+} from "./chunk-IHYSIPEK.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
   loadVaultPolicy,
   saveVaultPolicy
-} from "./chunk-56IIVAEO.js";
-import {
-  PresenceHandle,
-  SyncEngine,
-  SyncTransaction
-} from "./chunk-BXHMZ2XW.js";
-import {
-  BUNDLE_STORE_POLICY,
-  INDEXED_STORE_POLICY,
-  POD_STORE_POLICY,
-  SyncScheduler
-} from "./chunk-MTJLOC3Y.js";
-import {
-  PERIODS_COLLECTION
-} from "./chunk-EZNTORXE.js";
+} from "./chunk-Q2SEJMP2.js";
 import {
   SYNC_CREDENTIALS_COLLECTION,
   WeakSecretError,
   assertStrongSecret,
   buildRecipientKeyringFile,
+  ensureCollectionDEK,
   estimateEntropy,
   evaluateExportCapability,
   evaluateImportCapability,
@@ -403,7 +398,7 @@ import {
   listUsers,
   listUsersWithEnvelopes,
   validateSecret
-} from "./chunk-KPXM4WO6.js";
+} from "./chunk-FZAP4JNC.js";
 import {
   DIRECTORY_RECORD_ID,
   VISIBILITY_RECORD_PREFIX,
@@ -417,9 +412,9 @@ import {
   readUserVisibility,
   saveUserEnvelope,
   visibilityRecordId
-} from "./chunk-WZ3NCMK6.js";
-import "./chunk-PTHKZWEH.js";
-import "./chunk-IXNCZTWA.js";
+} from "./chunk-6PFST3FC.js";
+import "./chunk-PZRYKOKP.js";
+import "./chunk-PWEMRXPO.js";
 import {
   PolicyEnforcer,
   activeSessionCount,
@@ -434,7 +429,7 @@ import {
   revokeAllSessions,
   revokeSession,
   validateSessionPolicy
-} from "./chunk-X4MVWPHV.js";
+} from "./chunk-UC5Y7OEJ.js";
 import "./chunk-VKQCVU2Z.js";
 import {
   generateULID,
@@ -443,7 +438,7 @@ import {
 import {
   CollectionInstant,
   VaultInstant
-} from "./chunk-MANUDU7I.js";
+} from "./chunk-HGDXJVK2.js";
 import "./chunk-AFHQATY4.js";
 import {
   diff,
@@ -453,12 +448,12 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-Y6VZQGGH.js";
+} from "./chunk-JLBCK7XM.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
 } from "./chunk-I7FD46FF.js";
-import "./chunk-JYJFGD2H.js";
+import "./chunk-GYJRDALN.js";
 import {
   canonicalJson,
   envelopePayloadHash,
@@ -466,17 +461,18 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "./chunk-ISRKW4YN.js";
-import "./chunk-KFRPNHWR.js";
-import "./chunk-QD46HPZG.js";
+} from "./chunk-V3EGXDFN.js";
+import "./chunk-V4O6YZSP.js";
+import "./chunk-U2ID5A2I.js";
 import {
+  openEnvelopeJson,
   validateSchemaInput,
   validateSchemaOutput
-} from "./chunk-RZPOZPZU.js";
-import "./chunk-VH6SOCXH.js";
-import "./chunk-35NMVJ7I.js";
-import "./chunk-NFZGZ4AK.js";
-import "./chunk-QJNCB5SK.js";
+} from "./chunk-623QEHDB.js";
+import "./chunk-EFJAAFBW.js";
+import "./chunk-MYSNNMJ3.js";
+import "./chunk-L67H6FAQ.js";
+import "./chunk-GIGLOQL7.js";
 import "./chunk-LP7BEXCT.js";
 import {
   base64ToBuffer,
@@ -484,9 +480,10 @@ import {
   decryptBytes,
   decryptDeterministic,
   derivePresenceKey,
+  encrypt,
   encryptBytes,
   encryptDeterministic
-} from "./chunk-AKKRXT23.js";
+} from "./chunk-RPWMDIGK.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION,
@@ -494,7 +491,7 @@ import {
   NOYDB_SYNC_VERSION,
   SealedHandle,
   createStore
-} from "./chunk-GZACYEOB.js";
+} from "./chunk-77AEMXFA.js";
 import {
   AlreadyElevatedError,
   AmendmentForbiddenError,
@@ -623,8 +620,9 @@ import {
   UnsupportedTierCompositionError,
   UserEnvelopeOversizedError,
   ValidationError,
-  VaultTemplateNotFoundError
-} from "./chunk-QZWTRENR.js";
+  VaultTemplateNotFoundError,
+  isConflictError
+} from "./chunk-AR5D76T2.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-commit/numbering/descriptor.ts
@@ -949,6 +947,61 @@ function dict(dimension, opts) {
     ...opts?.substitute !== void 0 ? { substitute: opts.substitute } : {}
   };
 }
+
+// src/with-sync/credentials.ts
+function requireAdminAccess(keyring) {
+  if (keyring.role !== "owner" && keyring.role !== "admin") {
+    throw new PermissionDeniedError(
+      `Sync credentials require owner or admin role. Current role: "${keyring.role}"`
+    );
+  }
+}
+async function putCredential(adapter, vault, keyring, credential) {
+  requireAdminAccess(keyring);
+  const getDek = await ensureCollectionDEK(adapter, vault, keyring);
+  const dek = await getDek(SYNC_CREDENTIALS_COLLECTION);
+  const { iv, data } = await encrypt(JSON.stringify(credential), dek);
+  const existing = await adapter.get(vault, SYNC_CREDENTIALS_COLLECTION, credential.adapterId);
+  const version = existing ? existing._v + 1 : 1;
+  const envelope = {
+    _noydb: NOYDB_FORMAT_VERSION,
+    _v: version,
+    _ts: (/* @__PURE__ */ new Date()).toISOString(),
+    _iv: iv,
+    _data: data,
+    _by: keyring.userId
+  };
+  await adapter.put(
+    vault,
+    SYNC_CREDENTIALS_COLLECTION,
+    credential.adapterId,
+    envelope,
+    existing ? existing._v : void 0
+  );
+}
+async function getCredential(adapter, vault, keyring, adapterId) {
+  requireAdminAccess(keyring);
+  const getDek = await ensureCollectionDEK(adapter, vault, keyring);
+  const dek = await getDek(SYNC_CREDENTIALS_COLLECTION);
+  const envelope = await adapter.get(vault, SYNC_CREDENTIALS_COLLECTION, adapterId);
+  if (!envelope) return null;
+  const plaintext = await openEnvelopeJson(envelope, dek);
+  return JSON.parse(plaintext);
+}
+async function deleteCredential(adapter, vault, keyring, adapterId) {
+  requireAdminAccess(keyring);
+  await adapter.delete(vault, SYNC_CREDENTIALS_COLLECTION, adapterId);
+}
+async function listCredentials(adapter, vault, keyring) {
+  requireAdminAccess(keyring);
+  return adapter.list(vault, SYNC_CREDENTIALS_COLLECTION);
+}
+async function credentialStatus(adapter, vault, keyring, adapterId) {
+  const credential = await getCredential(adapter, vault, keyring, adapterId);
+  if (!credential) return { exists: false };
+  const expired = credential.expiresAt ? Date.now() > new Date(credential.expiresAt).getTime() : false;
+  return { exists: true, expired };
+}
 export {
   AlreadyElevatedError,
   AmendmentForbiddenError,
@@ -1254,6 +1307,7 @@ export {
   isClassifiedFieldSpec,
   isClassifiedGroup,
   isComputedDescriptor,
+  isConflictError,
   isCover,
   isDeedVault,
   isDevUnlockActive,