/**
 * `@noy-db/hub/team` — subpath export for multi-user / sync / keyring.
 *
 * Solo-user apps that never call `grant()`, `db.push()`, or open a
 * sync target can exclude this subpath entirely — bundle savings
 * estimated at ~4-6 KB.
 *
 * The main `@noy-db/hub` entry still re-exports every symbol for
 * backward compatibility — direct subpath import is purely a
 * tree-shaking opt-in.
 *
 * Named re-exports (not `export *`) so tsup keeps the barrel
 * populated even with `sideEffects: false`.
 */
export { withTeam } from './active.js';
export { NO_TEAM, type TeamStrategy } from './strategy.js';
export { TeamNotEnabledError } from '../../kernel/errors.js';
export type { UnlockedKeyring } from './keyring.js';
export { loadKeyring, createOwnerKeyring, grant, revoke, changeSecret, listUsers, listUsersWithEnvelopes, ensureCollectionDEK, persistKeyring, updateKeyringIdentity, buildRecipientKeyringFile, } from './keyring.js';
export type { BundleRecipient, ListUsersOptions } from './keyring.js';
export { enrollAuthenticator, removeAuthenticator, updateAuthenticator, findAuthenticator, } from './authenticators.js';
export type { EnrollAuthenticatorOptions, EnrollAuthenticatorWrappingKEKOptions, EnrollAuthenticatorWrappingDEKsOptions, UpdateAuthenticatorOptions, } from './authenticators.js';
export { rotatePassphrase, recoverPassphrase, } from './rotate-recover.js';
export type { RotatePassphraseInput, RecoverPassphraseInput, RecoverPassphraseResult, RecoveryProof, SlotRewrapContext, SlotRewrapCeremony, } from './rotate-recover.js';
export { recoverUser } from './peer-recover.js';
export type { RecoverUserOptions } from './peer-recover.js';
export { mintPaperRecoveryEntry, unwrapDeksFromPaperEntry, loadPaperRecoveryEntries, savePaperRecoveryEntries, burnPaperRecoveryEntry, } from './recovery.js';
export type { PaperRecoveryEntry } from './recovery.js';
export { mintWrappedDeksBlob, unwrapDeksFromBlob, } from './wrapped-deks.js';
export type { WrappedDeksBlob } from './wrapped-deks.js';
export { writeMagicLinkGrant, readMagicLinkGrantRecord, listMagicLinkGrants, unwrapMagicLinkGrant, revokeMagicLinkGrant, deriveMagicLinkContentKey, magicLinkGrantRecordId, isMagicLinkGrantExpired, } from './magic-link-grant.js';
export { hasExportCapability, evaluateExportCapability, } from './keyring.js';
export { hasImportCapability, evaluateImportCapability, } from './keyring.js';
export { SyncEngine } from './sync.js';
export { SyncTransaction } from './sync-transaction.js';
export { PresenceHandle } from './presence.js';
export { putCredential, getCredential, deleteCredential, listCredentials, credentialStatus, SYNC_CREDENTIALS_COLLECTION, } from './sync-credentials.js';
export type { SyncCredential } from './sync-credentials.js';