@noy-db/hub 0.9.0 → 0.10.0-pre.1

package/dist/index.js

@@ -1,24 +1,24 @@
 import {
   persistSchemaIfNeeded
-} from "./chunk-RKBCUP5D.js";
+} from "./chunk-X7Q2XL5U.js";
 import {
   LinkEndpointError
-} from "./chunk-6WEPFEMJ.js";
+} from "./chunk-VFGLMRO2.js";
 import {
   ComputedFieldError,
   evalComputedFields
-} from "./chunk-OR3OHKU6.js";
+} from "./chunk-PCYIDPFM.js";
 import "./chunk-GJW4HX2O.js";
 import {
   UserApi
-} from "./chunk-S2ORTQGS.js";
+} from "./chunk-RNQ7V4LH.js";
 import {
   WithdrawalRequestError,
   approveWithdrawal,
   listWithdrawalRequests,
   rejectWithdrawal,
   requestWithdrawal
-} from "./chunk-BMAXBTYH.js";
+} from "./chunk-7Q72NTBE.js";
 import {
   routeStore,
   withCache,
@@ -35,7 +35,7 @@ import {
   isMoneyString,
   moneyNumber,
   mulRate
-} from "./chunk-7JRLCP2J.js";
+} from "./chunk-JMMG7UWR.js";
 import {
   COVER_FIELDS,
   DEFAULT_COVER_SCHEMA,
@@ -46,7 +46,7 @@ import {
   blindUpdate,
   coordinatedCutover,
   lockSchema
-} from "./chunk-X5RGG3ZW.js";
+} from "./chunk-63INIVE4.js";
 import "./chunk-ZVF37PKE.js";
 import {
   DEFAULT_FRESHNESS_MS,
@@ -55,16 +55,16 @@ import {
   checkGate,
   describeGate,
   mergePolicy
-} from "./chunk-PREYKC76.js";
+} from "./chunk-E3CUGBGW.js";
 import {
   classified,
   luhnCheck
-} from "./chunk-Z2KP6PNF.js";
+} from "./chunk-XBOGGTUJ.js";
 import {
   decryptExtractedPartition,
   withCargo
-} from "./chunk-K5JNK63R.js";
-import "./chunk-ICHHNI5E.js";
+} from "./chunk-WJXLTO43.js";
+import "./chunk-DO33YCSZ.js";
 import {
   diffVault
 } from "./chunk-LFUID7OW.js";
@@ -73,26 +73,26 @@ import {
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "./chunk-LMC5L3MM.js";
+} from "./chunk-4XXRPSPS.js";
 import {
   withdrawAccessibleData
-} from "./chunk-FUHUGKDN.js";
+} from "./chunk-GEICXZCQ.js";
 import {
   exportAccessibleData
-} from "./chunk-U43RSPPX.js";
+} from "./chunk-J57OMNJ4.js";
 import {
   applyListProjection
 } from "./chunk-VG2ZSFYD.js";
 import {
   withDerivation,
   withRollup
-} from "./chunk-BQJ5ORU5.js";
+} from "./chunk-2EF2Z4UN.js";
 import {
   withMaterializedView
-} from "./chunk-LUQBG637.js";
-import "./chunk-2QH3I7QC.js";
-import "./chunk-GHMINSER.js";
-import "./chunk-27NCEPKM.js";
+} from "./chunk-5F3KYRG6.js";
+import "./chunk-26FMWFAW.js";
+import "./chunk-NC6CF37L.js";
+import "./chunk-AYUMAPOS.js";
 import {
   MoneyCurrencyError,
   MoneyPrecisionError,
@@ -101,16 +101,16 @@ import {
   isMoneyDescriptor,
   money,
   scaleForCurrency
-} from "./chunk-3EXQXOQ2.js";
+} from "./chunk-FDGE56FS.js";
 import {
   withOverlayedView
-} from "./chunk-AMSSAOOB.js";
-import "./chunk-7ONMS7QI.js";
+} from "./chunk-GWYZEPBY.js";
+import "./chunk-3HDBDUX2.js";
 import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "./chunk-N6EWQ5VB.js";
+} from "./chunk-CE443VXM.js";
 import {
   isDiscriminant
 } from "./chunk-PY4KJPYU.js";
@@ -118,14 +118,14 @@ import {
   immutableGuard,
   transitionGuard,
   withGuard
-} from "./chunk-UNAMWK2Q.js";
-import "./chunk-MMWX5OT5.js";
-import "./chunk-2IASHJPS.js";
+} from "./chunk-7DWAYY45.js";
+import "./chunk-WA4ZPMKP.js";
+import "./chunk-ZPXCQNXJ.js";
 import "./chunk-JK733I5V.js";
 import {
   CollectionFrame,
   VaultFrame
-} from "./chunk-RF5WDM25.js";
+} from "./chunk-G2KLVCKO.js";
 import {
   importExternalObjects,
   memoryObjectProjection
@@ -133,10 +133,10 @@ import {
 import {
   withLazy
 } from "./chunk-ULUMAZ5S.js";
-import "./chunk-BNYDOF2Q.js";
+import "./chunk-MXNYMFHE.js";
 import {
   reduceRecords
-} from "./chunk-4WLI37WK.js";
+} from "./chunk-2SPWVX6W.js";
 import {
   mergeCrdtStates,
   resolveCrdtSnapshot
@@ -148,7 +148,7 @@ import {
   signRedirect,
   verifyRedirect,
   wrapPodStore
-} from "./chunk-ZVJKHGE5.js";
+} from "./chunk-M2VLXPRU.js";
 import {
   Collection,
   ELEVATION_AUDIT_COLLECTION,
@@ -165,7 +165,7 @@ import {
   ref,
   refArray,
   withArchive
-} from "./chunk-U277K5GR.js";
+} from "./chunk-NB2DYYZL.js";
 import {
   deriveSchemaManifest,
   loadSchemaManifestEntry
@@ -177,19 +177,19 @@ import {
 import {
   LinkIntegrityError,
   isLinkCollectionName
-} from "./chunk-QNOWNCZS.js";
-import "./chunk-NHEKQWFI.js";
-import "./chunk-ZNVBCKMV.js";
+} from "./chunk-HQPS27BT.js";
+import "./chunk-7PFOKQOJ.js";
+import "./chunk-MRVQKRXI.js";
 import "./chunk-TLIFNRU5.js";
-import "./chunk-JQMEXCUZ.js";
-import "./chunk-CSAN22QG.js";
+import "./chunk-S4QDN4IQ.js";
+import "./chunk-AN4GUUQM.js";
 import "./chunk-X6Z2SIRF.js";
 import "./chunk-6LJY7X5A.js";
-import "./chunk-BSEPI3HD.js";
-import "./chunk-R4GLRJ55.js";
+import "./chunk-PR2R57YF.js";
+import "./chunk-QWC2PRUR.js";
 import {
   NO_CARGO
-} from "./chunk-IFUYLIEY.js";
+} from "./chunk-7WV6R7RG.js";
 import {
   MemoryRecipientSealer,
   MemorySealer,
@@ -197,7 +197,7 @@ import {
   parseRsaOaepTlv,
   sealRsaOaepTlv
 } from "./chunk-GU6QXHPZ.js";
-import "./chunk-PWAMX5KU.js";
+import "./chunk-PIEX7WSG.js";
 import {
   FormatsNotEnabledError
 } from "./chunk-RWFQVNXR.js";
@@ -206,20 +206,20 @@ import {
   CustodyApi,
   NO_CUSTODY,
   withCustody
-} from "./chunk-AI35LNWQ.js";
+} from "./chunk-SKSHWV3E.js";
 import {
   isViaFieldSpec,
   via
-} from "./chunk-VLRY2UH4.js";
+} from "./chunk-KOJHCSGS.js";
 import "./chunk-TFMM5DBB.js";
-import "./chunk-TU6ZJTYT.js";
+import "./chunk-SKF3DF7M.js";
 import {
   ClassifiedNeverStoredError,
   ClassifiedValidationError,
   isClassifiedFieldSpec,
   isClassifiedGroup,
   resolveClassifiedFields
-} from "./chunk-ID4ZBC3X.js";
+} from "./chunk-VWUSOPBF.js";
 import {
   FieldMetaUnknownFieldError
 } from "./chunk-QJNAHPVT.js";
@@ -234,23 +234,23 @@ import {
   loadPersistedSchema,
   savePersistedSchema
 } from "./chunk-IF2M43G4.js";
-import "./chunk-WIUH6EJ7.js";
+import "./chunk-LCY6ANV2.js";
 import {
   buildLookupSnapshot
-} from "./chunk-PZN76MMV.js";
-import "./chunk-PU5ZEV65.js";
+} from "./chunk-S2BQV6HM.js";
+import "./chunk-MKQHIYUY.js";
 import {
   INDEXED_STORE_POLICY,
   POD_STORE_POLICY,
   SyncScheduler
 } from "./chunk-7UHLO4ZN.js";
-import "./chunk-LZN6DTFI.js";
+import "./chunk-ZMDSBTFT.js";
 import "./chunk-NV4OESHC.js";
-import "./chunk-2T2TGRWE.js";
+import "./chunk-JM72WDAY.js";
 import "./chunk-GHVIKOHT.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-A52BK5AY.js";
+} from "./chunk-B24ODIKE.js";
 import "./chunk-SMY5X46Z.js";
 import "./chunk-DZFQVICS.js";
 import {
@@ -268,7 +268,7 @@ import {
   verifyPodHeader,
   verifyRecord,
   writePod
-} from "./chunk-4N4OIVK3.js";
+} from "./chunk-BCJAUHSG.js";
 import {
   COVER_RECORD_ID,
   isCover,
@@ -276,20 +276,20 @@ import {
   readCover,
   saveCover,
   validateCoverInput
-} from "./chunk-WQUIJPN4.js";
+} from "./chunk-HOK5KGBO.js";
 import "./chunk-GMKGGY7V.js";
 import {
   TxCollection,
   TxContext,
   TxVault,
   runTransaction
-} from "./chunk-PFHDQY5L.js";
+} from "./chunk-PVQIME6P.js";
 import "./chunk-5D2ALSM5.js";
 import {
   NO_SEARCH,
   tokenize,
   withSearch
-} from "./chunk-DL4GCSTS.js";
+} from "./chunk-VX72USUQ.js";
 import {
   fuseRetrieval
 } from "./chunk-AURFOK3D.js";
@@ -303,8 +303,8 @@ import {
   compileSequenceFormat,
   resolveSequenceKey,
   withSequence
-} from "./chunk-CLOSXHR4.js";
-import "./chunk-ZK2WT532.js";
+} from "./chunk-VPG2UJYR.js";
+import "./chunk-IIQMNZXT.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -321,8 +321,8 @@ import {
   getIntent,
   isPreCompressed,
   sweepBlobIntents
-} from "./chunk-7IV7GVOS.js";
-import "./chunk-2ODEFG6K.js";
+} from "./chunk-6I5RRBPP.js";
+import "./chunk-EPMX3SCC.js";
 import "./chunk-66TQOPFM.js";
 import {
   Lru,
@@ -335,11 +335,11 @@ import {
   CONSENT_AUDIT_COLLECTION
 } from "./chunk-ND6S2DKC.js";
 import "./chunk-GSAK56VF.js";
-import "./chunk-UMV5GBTJ.js";
+import "./chunk-PZZWAHEJ.js";
 import "./chunk-BKT776R5.js";
 import {
   CollectionIndexes
-} from "./chunk-AYOQZJDB.js";
+} from "./chunk-PIF3TNU2.js";
 import {
   ALL_PARTITIONS,
   describePartitionScope,
@@ -350,53 +350,53 @@ import {
   Query,
   ScanBuilder as ScanBuilder2,
   executePlan
-} from "./chunk-PBEHTFUG.js";
+} from "./chunk-I7NDTNHK.js";
 import {
   buildLiveQuery
-} from "./chunk-DYIR6RC3.js";
-import "./chunk-SVXFCCSX.js";
-import "./chunk-4KYKRYRT.js";
-import "./chunk-6WIFF46H.js";
+} from "./chunk-YAYDDYRU.js";
+import "./chunk-XBFJRCRW.js";
+import "./chunk-J3ECXFU7.js";
+import "./chunk-44CU4N7N.js";
 import "./chunk-SUZKW6UR.js";
-import "./chunk-F7X7MPK4.js";
+import "./chunk-HQFTE3DX.js";
 import "./chunk-VHM7HCKB.js";
 import "./chunk-XBKH4FOC.js";
 import {
   explainPlan,
   renderExplainText
-} from "./chunk-NIUHKKMM.js";
+} from "./chunk-DDR6SCG7.js";
 import {
   DEFAULT_CROSS_JOIN_MAX_ROWS,
   DEFAULT_JOIN_MAX_ROWS,
   applyJoins
-} from "./chunk-TBVDI3LY.js";
-import "./chunk-OK44MD3C.js";
+} from "./chunk-4RF7DVH2.js";
+import "./chunk-ME6LY5UG.js";
 import "./chunk-4CFHL5RY.js";
 import {
   ScanBuilder
-} from "./chunk-GZISWBCJ.js";
+} from "./chunk-BUFFPAR2.js";
 import "./chunk-F6NCB7KT.js";
 import {
   sortRecords
-} from "./chunk-7C7OF26T.js";
+} from "./chunk-R4PDYYK5.js";
 import "./chunk-3TDUWVWB.js";
-import "./chunk-O3NGOHXQ.js";
+import "./chunk-TA5VTIC4.js";
 import {
   evaluateClause,
   evaluateFieldClause,
   evaluateOperator,
   readPath
-} from "./chunk-SXPLIRQH.js";
-import "./chunk-YVA6UPRN.js";
+} from "./chunk-WQHEEYQA.js";
+import "./chunk-CZEWEOOV.js";
 import {
   dictKey,
   staticDict
-} from "./chunk-NUZ7ROUZ.js";
+} from "./chunk-Y6WJJRVV.js";
 import {
   DICT_COLLECTION_PREFIX,
   LookupHandle,
   dictCollectionName
-} from "./chunk-WVQDY3UM.js";
+} from "./chunk-U2N7DH4S.js";
 import {
   applyI18nLocale,
   enforceScript,
@@ -411,18 +411,18 @@ import {
   resolvePolicy,
   setAtPathInPlace,
   validateI18nTextValue
-} from "./chunk-UQRKAM2R.js";
+} from "./chunk-ZZZVNHN2.js";
 import {
   installViaBinder,
   isViaPrefixProbe
-} from "./chunk-PIO6NW7O.js";
+} from "./chunk-ZZLIFVZG.js";
 import {
   MemoryDeviceSeal,
   withTeam
-} from "./chunk-ZOFNZLAA.js";
+} from "./chunk-ESDYDGPH.js";
 import {
   beginEchoUnlock
-} from "./chunk-35CNOVQE.js";
+} from "./chunk-YWEPWJRG.js";
 import {
   MAGIC_LINK_GRANTS_COLLECTION,
   NO_TEAM,
@@ -451,7 +451,7 @@ import {
   unwrapDeksFromPaperEntry,
   unwrapMagicLinkGrant,
   writeMagicLinkGrant
-} from "./chunk-GLSCL74M.js";
+} from "./chunk-XBG6YJPK.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
@@ -483,7 +483,7 @@ import {
   validateSecret,
   verifyPrompt,
   verifyTypedEcho
-} from "./chunk-QVUMKG3Z.js";
+} from "./chunk-WVML7HUZ.js";
 import {
   DIRECTORY_RECORD_ID,
   VISIBILITY_RECORD_PREFIX,
@@ -497,9 +497,9 @@ import {
   readUserVisibility,
   saveUserEnvelope,
   visibilityRecordId
-} from "./chunk-6BEBWHNL.js";
-import "./chunk-XQGKS4OW.js";
-import "./chunk-FVKQ5QUC.js";
+} from "./chunk-PQGCWTTI.js";
+import "./chunk-OCSKQUNE.js";
+import "./chunk-PNEBCVXP.js";
 import {
   PolicyEnforcer,
   activeSessionCount,
@@ -514,7 +514,7 @@ import {
   revokeAllSessions,
   revokeSession,
   validateSessionPolicy
-} from "./chunk-QQLXKDGC.js";
+} from "./chunk-JWLVBYP4.js";
 import "./chunk-VKQCVU2Z.js";
 import {
   generateULID,
@@ -523,7 +523,7 @@ import {
 import {
   CollectionInstant,
   VaultInstant
-} from "./chunk-KBIS64X4.js";
+} from "./chunk-5OG7YQX5.js";
 import {
   diff,
   formatDiff
@@ -534,7 +534,7 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-Y22JWHCP.js";
+} from "./chunk-RKOXA5GZ.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
@@ -547,7 +547,7 @@ import {
   parseIndex,
   sha256Hex
 } from "./chunk-QHG7GQKM.js";
-import "./chunk-LJ744WXU.js";
+import "./chunk-KFYUQMF5.js";
 import "./chunk-OFD2HD6F.js";
 import "./chunk-P6FATPXQ.js";
 import {
@@ -564,14 +564,14 @@ import {
   openEnvelopeJson,
   recordAadFor
 } from "./chunk-WRLWEYHY.js";
-import "./chunk-O6VOR4NH.js";
-import "./chunk-VZFTON37.js";
+import "./chunk-OJAFKGI7.js";
+import "./chunk-6B4X447I.js";
 import "./chunk-NH2UOV3B.js";
 import {
   validateSchemaInput,
   validateSchemaOutput
-} from "./chunk-HTRLQ4ZZ.js";
-import "./chunk-EPPAEGH5.js";
+} from "./chunk-YIVAKBCW.js";
+import "./chunk-6Y3UJT5H.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_ENVELOPE_GENERATION,
@@ -580,7 +580,7 @@ import {
   NOYDB_SYNC_VERSION,
   SealedHandle,
   createStore
-} from "./chunk-URGHKZPL.js";
+} from "./chunk-VUBRHJ4H.js";
 import {
   AlreadyElevatedError,
   AmendmentForbiddenError,
@@ -731,7 +731,7 @@ import {
   WrongEchoError,
   WrongPromptError,
   isConflictError
-} from "./chunk-2RH5SEY7.js";
+} from "./chunk-JGYCKX56.js";
 
 // src/with-sync/change-broadcast.ts
 function defaultChangeChannel(name) {

package/dist/indexing/index.js

@@ -8,15 +8,15 @@ import {
   decodeIdxId,
   encodeIdxId,
   isIdxId
-} from "../chunk-2ODEFG6K.js";
+} from "../chunk-EPMX3SCC.js";
 import {
   CollectionIndexes
-} from "../chunk-AYOQZJDB.js";
+} from "../chunk-PIF3TNU2.js";
 import "../chunk-SUZKW6UR.js";
 import "../chunk-4CFHL5RY.js";
-import "../chunk-SXPLIRQH.js";
-import "../chunk-PIO6NW7O.js";
-import "../chunk-2RH5SEY7.js";
+import "../chunk-WQHEEYQA.js";
+import "../chunk-ZZLIFVZG.js";
+import "../chunk-JGYCKX56.js";
 
 // src/with-lookup/indexing/active.ts
 function withIndexing() {

package/dist/introspection/index.js

@@ -16,13 +16,13 @@ import "../chunk-UORWAG7K.js";
 import "../chunk-Y2NBBT6K.js";
 import "../chunk-IF2M43G4.js";
 import "../chunk-WRLWEYHY.js";
-import "../chunk-O6VOR4NH.js";
-import "../chunk-VZFTON37.js";
+import "../chunk-OJAFKGI7.js";
+import "../chunk-6B4X447I.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-HTRLQ4ZZ.js";
-import "../chunk-EPPAEGH5.js";
-import "../chunk-URGHKZPL.js";
-import "../chunk-2RH5SEY7.js";
+import "../chunk-YIVAKBCW.js";
+import "../chunk-6Y3UJT5H.js";
+import "../chunk-VUBRHJ4H.js";
+import "../chunk-JGYCKX56.js";
 export {
   FieldMetaUnknownFieldError,
   applyListProjection,

package/dist/issue-NPLQHB3S.js

@@ -0,0 +1,19 @@
+import {
+  issueAttestationCore
+} from "./chunk-B5PWQMZN.js";
+import "./chunk-B6EWMGFX.js";
+import "./chunk-RRI3JBD6.js";
+import "./chunk-GMKGGY7V.js";
+import "./chunk-4AOERLTV.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-OJAFKGI7.js";
+import "./chunk-6B4X447I.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-YIVAKBCW.js";
+import "./chunk-6Y3UJT5H.js";
+import "./chunk-VUBRHJ4H.js";
+import "./chunk-JGYCKX56.js";
+export {
+  issueAttestationCore
+};
+//# sourceMappingURL=issue-NPLQHB3S.js.map

package/dist/kernel/errors.d.ts

@@ -895,8 +895,9 @@ export declare class TierDemoteDeniedError extends NoydbError {
 }
 /**
  * Thrown when `db.delegate()` is called against a user that has no
- * keyring in the target vault — the delegation token cannot be
- * constructed without the target user's KEK wrap.
+ * keyring in the target vault — the token's content key is sealed to the
+ * target's inbox PUBLIC half (core#65/#96), which lives in that keyring, so
+ * without it there is nothing to seal to. Nothing secret of theirs is needed.
  */
 export declare class DelegationTargetMissingError extends NoydbError {
     readonly toUser: string;
@@ -2402,7 +2403,7 @@ export declare class ManagedRecoveryNotEnrolledError extends NoydbError {
     constructor(vault: string);
 }
 /**
- * Raised by `db.recoverSecret` / `db.enrollRecovery` /
+ * Raised by `db.team.recoverSecret` / `db.team.enrollRecovery` /
  * `db.rotateRecovery` when the developer requests a recovery profile
  * not yet wired in this hub release.
  *

package/dist/kernel/types.d.ts

@@ -906,7 +906,7 @@ export type VaultPolicyOnDisk = Record<string, unknown>;
  * - `paper` — `on-recovery` codes (the standard end-to-end profile).
  * - `shamir` / `multi-channel` / `admin-mediated` — API surface ships;
  *   per-profile dispatch lands in follow-up issues. Calling
- *   `db.recoverSecret` against these throws
+ *   `db.team.recoverSecret` against these throws
  *   {@link RecoveryProfileNotImplementedError}.
  */
 type RecoveryEnrollment = {
@@ -3476,7 +3476,7 @@ export interface NoydbOptions {
     /**
      * Vault-level policy gate document. When present, the hub
      * persists the merged policy at `_meta/policy` on first-time vault
-     * creation and gates sensitive operations (`db.rotateSecret`,
+     * creation and gates sensitive operations (`db.team.rotateSecret`,
      * `db.export*`, …) against it. Omitted ⇒ the engine uses
      * {@link PERSONAL_POLICY}. Use {@link STRICT_POLICY} for regulated
      * deployments.
@@ -3998,7 +3998,7 @@ export type BuiltInGateName = 'rotate-secret' | 'recover-secret' | 'enroll-authe
 /** Authorize reading other principals' user envelopes. */
  | 'view-team-profiles'
 /**
- * Authorize an atomic peer-recovery — `db.recoverUser`.
+ * Authorize an atomic peer-recovery — `db.team.recoverUser`.
  * Distinct from `revoke-user` because peer-recovery is intentional
  * re-issuance of someone's keyring under a temp secret, NOT
  * removal. Allows owner→owner natively (matches the threat model:
@@ -4080,8 +4080,8 @@ export interface FactorProof {
  * Noydb method. Used as the optional last parameter of every method
  * that runs through `checkGate`: `db.grant`, `db.revoke`, `db.updateUser`,
  * `db.enrollAuthenticator`, `db.removeAuthenticator`, `db.updateAuthenticator`,
- * `db.enrollWebAuthn`, `db.rotateSecret`, `db.recoverSecret`,
- * `db.recoverUser`, `db.enrollUnlock`, `db.describeUserAuth`,
+ * `db.team.enrollWebAuthn`, `db.team.rotateSecret`, `db.team.recoverSecret`,
+ * `db.team.recoverUser`, `db.team.enrollUnlock`, `db.team.describeUserAuth`,
  * `db.describeAllUsersAuth`.
  *
  * Previously this type was inlined at every call site as

package/dist/kernel/vault.d.ts

@@ -1159,8 +1159,8 @@ export declare class Vault {
     /**
      * issue a time-boxed cross-tier delegation. Writes an
      * encrypted envelope to the reserved `_delegations` collection that
-     * the target user's runtime will pick up next time they open the
-     * vault.
+     * the target picks up at their next `refreshDelegations()` call —
+     * explicit, never automatic (core#56).
      *
      * Caller must hold the tier DEK for the requested tier and
      * collection.