@noy-db/hub 0.6.0-pre.9 → 0.7.0-pre.0

package/dist/index.js

@@ -1,27 +1,49 @@
 import {
   persistSchemaIfNeeded
-} from "./chunk-2Z3NCLNX.js";
+} from "./chunk-QI5NWLVW.js";
 import {
   LinkEndpointError
-} from "./chunk-PDLLCOGD.js";
+} from "./chunk-5AFMP532.js";
 import {
   ComputedFieldError,
   evalComputedFields
-} from "./chunk-VMCCGUQB.js";
+} from "./chunk-7LYUJNU3.js";
 import {
   WithdrawalRequestError,
   approveWithdrawal,
   listWithdrawalRequests,
   rejectWithdrawal,
   requestWithdrawal
-} from "./chunk-4I72F5DF.js";
+} from "./chunk-4LPF226H.js";
+import {
+  DEFAULT_FRESHNESS_MS,
+  PERSONAL_POLICY,
+  STRICT_POLICY,
+  checkGate,
+  describeGate,
+  mergePolicy
+} from "./chunk-LR4Z47QD.js";
+import "./chunk-GJW4HX2O.js";
+import {
+  UserApi
+} from "./chunk-DBNYPLWY.js";
+import {
+  routeStore,
+  withCache,
+  withCircuitBreaker,
+  withHealthCheck,
+  withLogging,
+  withMetrics,
+  withRetry,
+  wrapStore
+} from "./chunk-EIPVYUEP.js";
 import {
   allocate,
   asMoney,
   isMoneyString,
   moneyNumber,
   mulRate
-} from "./chunk-N35NC4JH.js";
+} from "./chunk-Z2PWOSCJ.js";
 import {
   COVER_FIELDS,
   DEFAULT_COVER_SCHEMA,
@@ -32,67 +54,47 @@ import {
   blindUpdate,
   coordinatedCutover,
   lockSchema
-} from "./chunk-DMQCLZ4Z.js";
+} from "./chunk-YCSM3GZU.js";
 import "./chunk-ZVF37PKE.js";
-import {
-  DEFAULT_FRESHNESS_MS,
-  PERSONAL_POLICY,
-  STRICT_POLICY,
-  checkGate,
-  describeGate,
-  mergePolicy
-} from "./chunk-U5O6GIWZ.js";
-import "./chunk-GJW4HX2O.js";
-import {
-  UserApi
-} from "./chunk-6FJWSWFT.js";
 import {
   classified,
   luhnCheck
-} from "./chunk-FMQJZH4R.js";
+} from "./chunk-YMLQBZFJ.js";
 import {
   decryptExtractedPartition,
-  diffVault,
   withCargo
-} from "./chunk-RV3ARMPN.js";
-import "./chunk-4GZ6XOVW.js";
+} from "./chunk-YKPGQJFU.js";
+import "./chunk-OWLVBOWO.js";
+import {
+  diffVault
+} from "./chunk-LFUID7OW.js";
 import {
   createDeedOwner,
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "./chunk-NPP5R7FF.js";
+} from "./chunk-KN4W2OQ4.js";
 import {
   withdrawAccessibleData
-} from "./chunk-FZ6NYJ7L.js";
+} from "./chunk-H7HP56F6.js";
 import {
   exportAccessibleData
-} from "./chunk-FFDNKRCY.js";
-import {
-  routeStore,
-  withCache,
-  withCircuitBreaker,
-  withHealthCheck,
-  withLogging,
-  withMetrics,
-  withRetry,
-  wrapStore
-} from "./chunk-EIPVYUEP.js";
+} from "./chunk-DKWPJOYH.js";
 import {
   applyListProjection
 } from "./chunk-VG2ZSFYD.js";
 import {
   withDerivation,
   withRollup
-} from "./chunk-6HFM7EIT.js";
-import "./chunk-NJDQ4YSV.js";
-import "./chunk-YAWK6AWF.js";
+} from "./chunk-YPSOHDNC.js";
+import "./chunk-RDHUZ674.js";
+import "./chunk-225O5CXQ.js";
 import {
   withMaterializedView
-} from "./chunk-CEJWMBXO.js";
-import "./chunk-BEFVYAR5.js";
-import "./chunk-GAG7QOVO.js";
-import "./chunk-7F4DBNSP.js";
+} from "./chunk-PUJTKLPL.js";
+import "./chunk-QGJ4XIA7.js";
+import "./chunk-4ZPE6SKS.js";
+import "./chunk-PGFKIOR3.js";
 import {
   MoneyCurrencyError,
   MoneyPrecisionError,
@@ -101,73 +103,27 @@ import {
   isMoneyDescriptor,
   money,
   scaleForCurrency
-} from "./chunk-RXYYFSBB.js";
+} from "./chunk-TOV6VMHF.js";
 import {
   withOverlayedView
-} from "./chunk-FDX7OWWI.js";
-import "./chunk-FNSMZQS4.js";
+} from "./chunk-OPXR4PB2.js";
+import "./chunk-5ACAVJUI.js";
 import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "./chunk-BRVW2GS5.js";
+} from "./chunk-H36KSN6X.js";
 import {
   isDiscriminant
 } from "./chunk-PY4KJPYU.js";
 import {
-  CONSENT_AUDIT_COLLECTION
-} from "./chunk-VZ3XFUQ7.js";
-import {
-  immutableGuard,
-  transitionGuard,
-  withGuard
-} from "./chunk-RTAMLDWP.js";
-import "./chunk-WLYIROCJ.js";
-import "./chunk-KUDZVJKQ.js";
-import "./chunk-JK733I5V.js";
-import {
-  CollectionFrame,
-  VaultFrame
-} from "./chunk-JRCYZEHU.js";
-import {
-  importExternalObjects,
-  memoryObjectProjection
-} from "./chunk-4Q6HSHHL.js";
-import {
-  BLOB_CHUNKS_COLLECTION,
-  BLOB_COLLECTION,
-  BLOB_INDEX_COLLECTION,
-  BLOB_INTENT_COLLECTION,
-  BLOB_SLOTS_PREFIX,
-  BLOB_VERSIONS_PREFIX,
-  BlobSet,
-  DEFAULT_CHUNK_SIZE,
-  createIntent,
-  deleteIntent,
-  detectMagic,
-  detectMimeType,
-  getIntent,
-  isPreCompressed,
-  sweepBlobIntents
-} from "./chunk-PL2GHSCM.js";
-import {
-  withLazy
-} from "./chunk-THNJ3IKU.js";
-import "./chunk-CCZJJ4I2.js";
-import {
-  mergeCrdtStates,
-  resolveCrdtSnapshot
-} from "./chunk-4GPE63GU.js";
-import {
-  createBundleStore,
   createPodStore,
   followRedirects,
   open,
   signRedirect,
   verifyRedirect,
-  wrapBundleStore,
   wrapPodStore
-} from "./chunk-BWVKEOPE.js";
+} from "./chunk-ATV637J7.js";
 import {
   Collection,
   ELEVATION_AUDIT_COLLECTION,
@@ -186,13 +142,12 @@ import {
   refArray,
   via,
   withArchive
-} from "./chunk-2GAJGUNM.js";
-import "./chunk-HVQGCKY4.js";
-import "./chunk-4HDYQL3J.js";
+} from "./chunk-Y3YLJORD.js";
+import "./chunk-VAG47QHV.js";
 import {
   deriveSchemaManifest,
   loadSchemaManifestEntry
-} from "./chunk-2DHSSLOD.js";
+} from "./chunk-QHJKK77B.js";
 import {
   MANIFEST_COLLECTION,
   isManifestReservedCollection
@@ -200,74 +155,95 @@ import {
 import {
   LinkIntegrityError,
   isLinkCollectionName
-} from "./chunk-HNHCQ556.js";
+} from "./chunk-WLLUM35R.js";
+import "./chunk-JVLSU7S2.js";
+import "./chunk-Y6GZ2P4M.js";
+import "./chunk-L6GTLZRK.js";
 import "./chunk-GYGLAVCX.js";
-import "./chunk-6BU3L4UE.js";
-import "./chunk-G6S5VVHP.js";
 import "./chunk-6LJY7X5A.js";
+import "./chunk-E6YA6UAP.js";
 import {
   ClassifiedNeverStoredError,
   ClassifiedValidationError,
   isClassifiedFieldSpec,
   isClassifiedGroup,
   resolveClassifiedFields
-} from "./chunk-QULVCV3M.js";
-import "./chunk-6NVPFKN3.js";
-import "./chunk-FUHKW252.js";
+} from "./chunk-GK4DRVUD.js";
+import "./chunk-WK5FSW7T.js";
+import "./chunk-J4MN6XIU.js";
 import {
   NO_CARGO
-} from "./chunk-DG27IUVI.js";
+} from "./chunk-XJ3FEKEY.js";
 import {
   MemoryRecipientSealer,
-  MemorySealingKeyProvider,
+  MemorySealer,
   aesGcmOpen,
   parseRsaOaepTlv,
   sealRsaOaepTlv
-} from "./chunk-XWX7GL56.js";
+} from "./chunk-Z2WK53N6.js";
+import "./chunk-CBRS2NEK.js";
 import "./chunk-KHKKD62N.js";
 import {
   derivePersistedSchema,
   isZodSchema
-} from "./chunk-Z45YRGFO.js";
+} from "./chunk-P6ASQOZR.js";
 import "./chunk-Y2NBBT6K.js";
 import {
   SCHEMAS_COLLECTION,
   loadPersistedSchema,
   savePersistedSchema
-} from "./chunk-CDB2HVQW.js";
+} from "./chunk-YXA2TCTZ.js";
+import {
+  NO_SEQUENCE,
+  SequenceStore,
+  compileSequenceFormat,
+  resolveSequenceKey,
+  withSequence
+} from "./chunk-CN6B5PEN.js";
 import {
   CustodyApi,
   NO_CUSTODY,
   withCustody
-} from "./chunk-ADW22QSB.js";
-import "./chunk-7TSYBD3E.js";
+} from "./chunk-J4UJ5FRV.js";
+import "./chunk-5263OEM3.js";
 import {
   buildLookupSnapshot
-} from "./chunk-5ZKS6ZE2.js";
-import "./chunk-OF3L2SD6.js";
+} from "./chunk-VTG7327U.js";
+import "./chunk-3QARDAYW.js";
 import {
-  BUNDLE_STORE_POLICY,
   INDEXED_STORE_POLICY,
   POD_STORE_POLICY,
   SyncScheduler
-} from "./chunk-55LKVALY.js";
-import "./chunk-VJFMXYKP.js";
+} from "./chunk-T7IR4N2S.js";
+import {
+  CONSENT_AUDIT_COLLECTION
+} from "./chunk-MTBXJAS4.js";
 import "./chunk-PEOZ34EM.js";
-import "./chunk-5O5HRRTV.js";
+import "./chunk-PCQDY6QN.js";
 import "./chunk-GHVIKOHT.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-HPLWFNG4.js";
+} from "./chunk-Z7ZXZL6Y.js";
+import {
+  immutableGuard,
+  transitionGuard,
+  withGuard
+} from "./chunk-NLKLXXTO.js";
+import "./chunk-AB5P32RE.js";
+import "./chunk-SHILAQH5.js";
+import "./chunk-JK733I5V.js";
+import {
+  CollectionFrame,
+  VaultFrame
+} from "./chunk-XVU7J43V.js";
 import "./chunk-SMY5X46Z.js";
 import "./chunk-DZFQVICS.js";
 import {
-  NOYDB_BUNDLE_FORMAT_VERSION,
-  NOYDB_BUNDLE_MAGIC,
-  NOYDB_BUNDLE_PREFIX_BYTES,
+  NOYDB_POD_FORMAT_VERSION,
+  NOYDB_POD_MAGIC,
+  NOYDB_POD_PREFIX_BYTES,
   POD_SIG_ALG,
-  hasNoydbBundleMagic,
-  readNoydbBundle,
-  readNoydbBundleHeader,
+  hasNoydbPodMagic,
   readPod,
   readPodCover,
   readPodHeader,
@@ -276,9 +252,8 @@ import {
   signedBytes,
   verifyPodHeader,
   verifyRecord,
-  writeNoydbBundle,
   writePod
-} from "./chunk-4VUPLMZ6.js";
+} from "./chunk-6FOGTKBY.js";
 import {
   COVER_RECORD_ID,
   isCover,
@@ -286,69 +261,92 @@ import {
   readCover,
   saveCover,
   validateCoverInput
-} from "./chunk-2BMRJ6LQ.js";
+} from "./chunk-LF6DMX4C.js";
 import {
   TxCollection,
   TxContext,
   TxVault,
   runTransaction
-} from "./chunk-35EBKWQU.js";
+} from "./chunk-VFIWDPXZ.js";
 import "./chunk-5D2ALSM5.js";
 import {
   NO_SEARCH,
   tokenize,
   withSearch
-} from "./chunk-3JVXVJ7L.js";
+} from "./chunk-S35S77YU.js";
 import {
   fuseRetrieval
 } from "./chunk-AURFOK3D.js";
-import {
-  NO_SEQUENCE,
-  SequenceStore,
-  compileSequenceFormat,
-  resolveSequenceKey,
-  withSequence
-} from "./chunk-7MNBICB5.js";
+import "./chunk-UCUALOSM.js";
 import {
   DEFAULT_CROSS_JOIN_MAX_ROWS,
   Query,
   ScanBuilder,
   buildLiveQuery,
   executePlan
-} from "./chunk-3737A6EA.js";
+} from "./chunk-S2VG3ABP.js";
 import {
   DEFAULT_JOIN_MAX_ROWS,
   applyJoins
-} from "./chunk-E6427JU2.js";
-import "./chunk-WASHZV34.js";
-import "./chunk-JIUVJ4M7.js";
+} from "./chunk-XSN63FUS.js";
+import {
+  importExternalObjects,
+  memoryObjectProjection
+} from "./chunk-4Q6HSHHL.js";
+import "./chunk-F23WQK3G.js";
+import {
+  BLOB_CHUNKS_COLLECTION,
+  BLOB_COLLECTION,
+  BLOB_INDEX_COLLECTION,
+  BLOB_INTENT_COLLECTION,
+  BLOB_SLOTS_PREFIX,
+  BLOB_VERSIONS_PREFIX,
+  BlobSet,
+  DEFAULT_CHUNK_SIZE,
+  createIntent,
+  deleteIntent,
+  detectMagic,
+  detectMimeType,
+  getIntent,
+  isPreCompressed,
+  sweepBlobIntents
+} from "./chunk-ALB64CZM.js";
+import "./chunk-F7ZFRPGQ.js";
 import {
   CollectionIndexes
-} from "./chunk-GQ3BX5EA.js";
+} from "./chunk-I3ISCYT7.js";
+import {
+  withLazy
+} from "./chunk-THNJ3IKU.js";
 import {
   Lru,
   estimateRecordBytes,
   parseBytes
 } from "./chunk-NO272T7Q.js";
+import "./chunk-4G25SDQL.js";
 import "./chunk-XZHEOSQ2.js";
 import "./chunk-YMUFFJCO.js";
-import "./chunk-CADUYBQD.js";
+import "./chunk-ATL3ZVXT.js";
 import {
   evaluateClause,
   evaluateFieldClause,
   readPath
-} from "./chunk-IGJCYUT5.js";
+} from "./chunk-NSITFOCJ.js";
+import {
+  mergeCrdtStates,
+  resolveCrdtSnapshot
+} from "./chunk-4GPE63GU.js";
 import "./chunk-PVEWA2DU.js";
-import "./chunk-SUFG5E73.js";
+import "./chunk-ALUNQEBY.js";
 import {
   dictKey,
   staticDict
-} from "./chunk-MSWYQLMQ.js";
+} from "./chunk-2GXEQUEX.js";
 import {
   DICT_COLLECTION_PREFIX,
   LookupHandle,
   dictCollectionName
-} from "./chunk-WFUIE565.js";
+} from "./chunk-57JTHWLQ.js";
 import {
   applyI18nLocale,
   enforceScript,
@@ -363,15 +361,15 @@ import {
   resolvePolicy,
   setAtPathInPlace,
   validateI18nTextValue
-} from "./chunk-7G6VDWXB.js";
+} from "./chunk-X67FCULK.js";
 import {
   installViaBinder
-} from "./chunk-UHXCLPGC.js";
+} from "./chunk-XDVVBETV.js";
 import {
-  MemoryDeviceSealProvider,
+  MemoryDeviceSeal,
   beginEchoUnlock,
   withTeam
-} from "./chunk-YJ6IONGA.js";
+} from "./chunk-X62MEF2O.js";
 import {
   MAGIC_LINK_GRANTS_COLLECTION,
   NO_TEAM,
@@ -400,18 +398,19 @@ import {
   unwrapDeksFromPaperEntry,
   unwrapMagicLinkGrant,
   writeMagicLinkGrant
-} from "./chunk-O2ERS4UJ.js";
+} from "./chunk-H4M7ADXY.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
   loadVaultPolicy,
   saveVaultPolicy
-} from "./chunk-3IXIU6FP.js";
+} from "./chunk-PQ6Z2TAP.js";
 import {
   DEFAULT_ECHO_MIN_WORD_LENGTH,
   DEFAULT_ECHO_PROMPT_MIN_WORDS,
   SYNC_CREDENTIALS_COLLECTION,
   WeakSecretError,
+  assertRosterAuthenticated,
   assertStrongEchoSecret,
   assertStrongSecret,
   buildEchoBlock,
@@ -429,7 +428,7 @@ import {
   validateSecret,
   verifyPrompt,
   verifyTypedEcho
-} from "./chunk-JRKZTEZZ.js";
+} from "./chunk-5W7YXFV5.js";
 import {
   DIRECTORY_RECORD_ID,
   VISIBILITY_RECORD_PREFIX,
@@ -443,9 +442,9 @@ import {
   readUserVisibility,
   saveUserEnvelope,
   visibilityRecordId
-} from "./chunk-5JY5TSVY.js";
-import "./chunk-AHLJSVRL.js";
-import "./chunk-W3TVWF6N.js";
+} from "./chunk-DFAUMLD7.js";
+import "./chunk-HTGRQZFB.js";
+import "./chunk-4A4TYISP.js";
 import {
   PolicyEnforcer,
   activeSessionCount,
@@ -460,31 +459,30 @@ import {
   revokeAllSessions,
   revokeSession,
   validateSessionPolicy
-} from "./chunk-4UVDI4XE.js";
+} from "./chunk-T3PHCEN4.js";
 import "./chunk-VKQCVU2Z.js";
 import {
   generateULID,
   isULID
-} from "./chunk-ZJADGNYF.js";
+} from "./chunk-4AOERLTV.js";
 import {
   CollectionInstant,
   VaultInstant
-} from "./chunk-52JPHN5N.js";
+} from "./chunk-A2YW5EMU.js";
 import {
   diff,
   formatDiff
 } from "./chunk-SVLR4POP.js";
-import "./chunk-AFHQATY4.js";
+import "./chunk-6EW2UCVF.js";
 import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-Q6TEJXBX.js";
+} from "./chunk-IESNYJXZ.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
 } from "./chunk-I7FD46FF.js";
-import "./chunk-3FSX6LDG.js";
 import {
   canonicalJson,
   envelopePayloadHash,
@@ -492,18 +490,23 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "./chunk-6SAFL5YE.js";
-import "./chunk-WLZ47GSL.js";
-import "./chunk-FAXZQ5UF.js";
+} from "./chunk-RC4BROYR.js";
+import "./chunk-POS53FG6.js";
+import "./chunk-HK67PX4J.js";
+import "./chunk-467SKJ65.js";
 import {
+  buildRecordAad,
   openEnvelopeJson,
+  recordAadFor,
   validateSchemaInput,
   validateSchemaOutput
-} from "./chunk-3URQC7EH.js";
-import "./chunk-7H73RIE3.js";
-import "./chunk-HXGUIPQB.js";
-import "./chunk-AR2JDFAE.js";
-import "./chunk-747LRSOO.js";
+} from "./chunk-2LPVI4PX.js";
+import {
+  buildRecordEnvelope
+} from "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
 import {
   base64ToBuffer,
@@ -514,7 +517,7 @@ import {
   encrypt,
   encryptBytes,
   encryptDeterministic
-} from "./chunk-VCETL77O.js";
+} from "./chunk-W5LHQXZU.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION,
@@ -522,7 +525,7 @@ import {
   NOYDB_SYNC_VERSION,
   SealedHandle,
   createStore
-} from "./chunk-YPYHVOXP.js";
+} from "./chunk-RK7N4OQ5.js";
 import {
   AlreadyElevatedError,
   AmendmentForbiddenError,
@@ -532,9 +535,6 @@ import {
   BackupLedgerError,
   BlobIntentPendingError,
   BlobOfflineError,
-  BundleIntegrityError,
-  BundleSealMismatchError,
-  BundleVersionConflictError,
   CargoNotEnabledError,
   ClassifiedConfigError,
   ClassifiedNotEnabledError,
@@ -579,6 +579,7 @@ import {
   JoinTooLargeError,
   KeyringCorruptError,
   KeyringExpiredError,
+  KeyringTamperedError,
   LedgerContentionError,
   LocaleNotSpecifiedError,
   ManagedRecoveryNotEnrolledError,
@@ -604,6 +605,8 @@ import {
   PermissionDeniedError,
   PersistedIndexCompensationError,
   PodHeaderVerificationError,
+  PodIntegrityError,
+  PodSealMismatchError,
   PodVersionConflictError,
   PolicyDeniedError,
   PortabilityNotEnabledError,
@@ -620,6 +623,7 @@ import {
   RedirectDepthExceededError,
   RedirectLoopError,
   RedirectUnreachableError,
+  RefNotDeclaredError,
   ReservedCollectionNameError,
   ReservedVaultNameError,
   RestrictRefUnresolvableError,
@@ -665,7 +669,7 @@ import {
   WrongEchoError,
   WrongPromptError,
   isConflictError
-} from "./chunk-HNGSV2YC.js";
+} from "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-commit/numbering/descriptor.ts
@@ -680,7 +684,7 @@ function withDeferredNumbering(opts) {
 
 // src/via/computed/binding.ts
 var VIRTUAL_POSTURE = { encryptedAtRest: "envelope", queryable: "none", exportable: true, forgettable: false };
-function computedBinding(cfg) {
+function computedVia(cfg) {
   const fields = cfg.virtualFields;
   return {
     brand: "computed",
@@ -697,7 +701,7 @@ function computedBinding(cfg) {
   };
 }
 function linkComputedVia() {
-  installViaBinder("computed", (cfg) => computedBinding(cfg));
+  installViaBinder("computed", (cfg) => computedVia(cfg));
 }
 
 // src/via/computed/descriptor.ts
@@ -916,7 +920,7 @@ function resolveLookupOrderLabel(field, key, locale, cfg) {
   if (!rows) return void 0;
   return buildLookupSnapshot(desc.dimension, rows, desc).label(key, locale ?? desc.displayLocale ?? "");
 }
-function lookupBinding(cfg) {
+function lookupVia(cfg) {
   return {
     brand: "lookup",
     posture: { encryptedAtRest: "envelope", queryable: "full", exportable: true, forgettable: false },
@@ -931,7 +935,7 @@ function lookupBinding(cfg) {
   };
 }
 function linkLookupVia() {
-  installViaBinder("lookup", (c) => lookupBinding(c));
+  installViaBinder("lookup", (c) => lookupVia(c));
 }
 
 // src/via/lookup/descriptor.ts
@@ -1003,17 +1007,11 @@ async function putCredential(adapter, vault, keyring, credential) {
   requireAdminAccess(keyring);
   const getDek = await ensureCollectionDEK(adapter, vault, keyring);
   const dek = await getDek(SYNC_CREDENTIALS_COLLECTION);
-  const { iv, data } = await encrypt(JSON.stringify(credential), dek);
   const existing = await adapter.get(vault, SYNC_CREDENTIALS_COLLECTION, credential.adapterId);
   const version = existing ? existing._v + 1 : 1;
-  const envelope = {
-    _noydb: NOYDB_FORMAT_VERSION,
-    _v: version,
-    _ts: (/* @__PURE__ */ new Date()).toISOString(),
-    _iv: iv,
-    _data: data,
-    _by: keyring.userId
-  };
+  const identity = { collection: SYNC_CREDENTIALS_COLLECTION, id: credential.adapterId, version };
+  const { iv, data } = await encrypt(JSON.stringify(credential), dek, buildRecordAad(identity));
+  const envelope = buildRecordEnvelope(identity, { iv, data });
   await adapter.put(
     vault,
     SYNC_CREDENTIALS_COLLECTION,
@@ -1028,7 +1026,7 @@ async function getCredential(adapter, vault, keyring, adapterId) {
   const dek = await getDek(SYNC_CREDENTIALS_COLLECTION);
   const envelope = await adapter.get(vault, SYNC_CREDENTIALS_COLLECTION, adapterId);
   if (!envelope) return null;
-  const plaintext = await openEnvelopeJson(envelope, dek);
+  const plaintext = await openEnvelopeJson({ collection: SYNC_CREDENTIALS_COLLECTION, id: adapterId }, envelope, dek);
   return JSON.parse(plaintext);
 }
 async function deleteCredential(adapter, vault, keyring, adapterId) {
@@ -1056,15 +1054,11 @@ export {
   BLOB_INTENT_COLLECTION,
   BLOB_SLOTS_PREFIX,
   BLOB_VERSIONS_PREFIX,
-  BUNDLE_STORE_POLICY,
   BackupCorruptedError,
   BackupLedgerError,
   BlobIntentPendingError,
   BlobOfflineError,
   BlobSet,
-  BundleIntegrityError,
-  BundleSealMismatchError,
-  BundleVersionConflictError,
   CONSENT_AUDIT_COLLECTION,
   COVER_FIELDS,
   COVER_RECORD_ID,
@@ -1133,6 +1127,7 @@ export {
   JoinTooLargeError,
   KeyringCorruptError,
   KeyringExpiredError,
+  KeyringTamperedError,
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION,
   LedgerContentionError,
@@ -1150,20 +1145,20 @@ export {
   MaterializedViewCycleError,
   MaterializedViewSourceUnknownError,
   MaterializedViewTooLargeError,
-  MemoryDeviceSealProvider,
+  MemoryDeviceSeal,
   MemoryRecipientSealer,
-  MemorySealingKeyProvider,
+  MemorySealer,
   MigrationRequiredError,
   MissingTranslationError,
   MoneyCurrencyError,
   MoneyPrecisionError,
   MoneyUnsupportedError,
   NOYDB_BACKUP_VERSION,
-  NOYDB_BUNDLE_FORMAT_VERSION,
-  NOYDB_BUNDLE_MAGIC,
-  NOYDB_BUNDLE_PREFIX_BYTES,
   NOYDB_FORMAT_VERSION,
   NOYDB_KEYRING_VERSION,
+  NOYDB_POD_FORMAT_VERSION,
+  NOYDB_POD_MAGIC,
+  NOYDB_POD_PREFIX_BYTES,
   NOYDB_SYNC_VERSION,
   NO_CARGO,
   NO_CUSTODY,
@@ -1191,6 +1186,8 @@ export {
   PermissionDeniedError,
   PersistedIndexCompensationError,
   PodHeaderVerificationError,
+  PodIntegrityError,
+  PodSealMismatchError,
   PodVersionConflictError,
   PolicyDeniedError,
   PolicyEnforcer,
@@ -1212,6 +1209,7 @@ export {
   RedirectLoopError,
   RedirectUnreachableError,
   RefIntegrityError,
+  RefNotDeclaredError,
   RefRegistry,
   RefScopeError,
   ReservedCollectionNameError,
@@ -1287,6 +1285,7 @@ export {
   applyPatch,
   approveWithdrawal,
   asMoney,
+  assertRosterAuthenticated,
   assertStrongEchoSecret,
   assertStrongSecret,
   base64ToBuffer,
@@ -1305,7 +1304,6 @@ export {
   computePatch,
   computed,
   coordinatedCutover,
-  createBundleStore,
   createDeedOwner,
   createEnforcer,
   createIntent,
@@ -1364,7 +1362,7 @@ export {
   getIntent,
   hasExportCapability,
   hasImportCapability,
-  hasNoydbBundleMagic,
+  hasNoydbPodMagic,
   hashEntry,
   i18nText,
   immutableGuard,
@@ -1435,14 +1433,13 @@ export {
   readCover,
   readDirectoryConfig,
   readMagicLinkGrantRecord,
-  readNoydbBundle,
-  readNoydbBundleHeader,
   readPath,
   readPod,
   readPodCover,
   readPodHeader,
   readPodRedirect,
   readUserVisibility,
+  recordAadFor,
   recoverUser,
   ref,
   refArray,
@@ -1514,11 +1511,9 @@ export {
   withSequence,
   withTeam,
   withdrawAccessibleData,
-  wrapBundleStore,
   wrapPodStore,
   wrapStore,
   writeMagicLinkGrant,
-  writeNoydbBundle,
   writePod
 };
 //# sourceMappingURL=index.js.map