@fortemi/core 2026.9.5 → 2026.9.7

package/dist/index.d.ts

@@ -1177,6 +1177,58 @@ declare class RemoteBackendError extends Error {
     readonly name = "RemoteBackendError";
     constructor(kind: RemoteBackendErrorKind, status?: number | undefined, problemCode?: string | undefined, requestId?: string | undefined, retryAfterSeconds?: number | undefined);
 }
+interface EvidenceTextUnit {
+    readonly kind: 'attachment' | 'current' | 'embedding' | 'title';
+    readonly id: string;
+    readonly index: number;
+}
+interface EvidenceSourceIdentity {
+    readonly namespace: string;
+    readonly external_id_hash: string;
+    readonly import_run_id: string;
+    readonly schema_version: string;
+}
+interface SearchEvidenceLocator {
+    readonly version: '1.0.0';
+    readonly note_id: string;
+    readonly unit: EvidenceTextUnit;
+    readonly content_digest: string;
+    readonly span: {
+        readonly end: number;
+        readonly start: number;
+        readonly unit: 'utf8-bytes';
+    };
+    readonly source?: EvidenceSourceIdentity;
+}
+/** The caller supplies already-authorized text, not an access grant from this type. */
+interface EvidenceTextSnapshot {
+    readonly note_id: string;
+    readonly unit: EvidenceTextUnit;
+    readonly content: string;
+    readonly source?: EvidenceSourceIdentity;
+}
+/** Parse an untrusted wire value, taking an immutable validated copy. */
+declare function parseSearchEvidenceLocator(value: unknown): SearchEvidenceLocator;
+/** Bind exact raw text. No Unicode normalization, trimming or HTML processing. */
+declare function bindSearchEvidence(text: EvidenceTextSnapshot, start: number, end: number): SearchEvidenceLocator;
+/** Pure binding check over already-authorized text; never performs database I/O. */
+declare function resolveSearchEvidence(value: unknown, text: EvidenceTextSnapshot | null): string;
+declare const EVIDENCE_OMISSIONS: readonly [
+    "unavailable-unit",
+    "locator-limit"
+];
+type SearchEvidenceOmission = typeof EVIDENCE_OMISSIONS[number];
+interface SearchEvidenceSet {
+    readonly version: '1.0.0';
+    readonly locators: readonly SearchEvidenceLocator[];
+    readonly omissions: readonly SearchEvidenceOmission[];
+}
+/** Validate canonical ordering and the enclosing hit's native note identity. */
+declare function parseSearchEvidenceSet(value: unknown, noteId: string): SearchEvidenceSet;
+/** Bound and deduplicate already-projected locators; never fetch or invent text. */
+declare function createSearchEvidenceSet(noteId: string, values: readonly unknown[], omissions?: readonly SearchEvidenceOmission[]): SearchEvidenceSet;
+/** Merge one hit's retrieval legs, retaining partial/unavailable provenance. */
+declare function mergeSearchEvidenceSets(noteId: string, sets: readonly SearchEvidenceSet[]): SearchEvidenceSet;
 /**
  * Type-safe client for the PGlite Worker.
  *
@@ -1644,1565 +1696,1628 @@ interface ShardReader {
  * reader than this build throws (the host should fall back to `importShard`).
  */
 declare function openShard(source: ShardReaderSource, options?: OpenShardOptions): Promise<ShardReader>;
-/**
- * Backend seam (#191) — a uniform tool-intent operation interface that lets the
- * PGlite database backend (#187) and the static-file shard backend (#189) be
- * selected and dispatched against the same way, plus a capability-negotiation
- * API so a caller asks for the operations it needs and gets the lightest backend
- * that provides them.
- *
- * The seam sits one level above SQL: every adapter exposes the same read
- * operations (and optional relationship, write, semantic, and full-content ops)
- * regardless of whether the data lives in a queryable PGlite instance, a set of
- * static shard files fetched over HTTP, or the Fortemi server tier.
- */
-/**
- * Semantic-search tier a backend offers, in increasing capability:
- * - `none`     — no vector search (text / facets only)
- * - `cosine-small` — brute-force cosine over a small static vector set (#189)
- * - `ann-full` — prebuilt/queryable approximate-nearest-neighbour over the full
- *   corpus (PGlite + pgvector, or a prebuilt ANN snapshot)
- * - `server`   — delegated to the remote Fortemi server backend
- */
-type BackendSemanticTier = 'ann-full' | 'cosine-small' | 'none' | 'server';
-/** Relative startup cost of bringing a backend online. */
-type BackendStartupCost = 'index-build' | 'instant' | 'network';
-/** What a backend can do — the unit of capability negotiation. */
-interface BackendCapabilities {
-    /** Can answer list / get / search read operations. */
-    read: boolean;
-    /** Can mutate notes (manageNote). */
-    write: boolean;
-    /** Can merge external shards into its store. */
-    merge: boolean;
-    /** Coordinates concurrent multi-user writes. */
-    multiUser: boolean;
-    /** Highest semantic-search tier available. */
-    semantic: BackendSemanticTier;
-    /** Relative cost to bring the backend online. */
-    startupCost: BackendStartupCost;
+type JsonObject = Record<string, unknown>;
+interface NativeEmbeddingConfig {
+    id: string;
+    name: string;
+    description: null | string;
+    model: string;
+    dimension: number;
+    chunk_size: number;
+    chunk_overlap: number;
+    hnsw_m: null | number;
+    hnsw_ef_construction: null | number;
+    ivfflat_lists: null | number;
+    is_default: boolean | null;
+    supports_mrl: boolean | null;
+    matryoshka_dims: null | number[];
+    default_truncate_dim: null | number;
+    provider: null | string;
+    provider_config: JsonObject | null;
+    content_types: null | string[];
+    strengths: null | string[];
+    limitations: null | string[];
+    recommended_for: null | string[];
+    benchmark_scores: JsonObject | null;
+    is_available: boolean | null;
+    document_composition: JsonObject;
+    created_at: string;
+    updated_at: string;
+}
+interface NativeEmbeddingSet {
+    id: string;
+    name: string;
+    slug: null | string;
+    description: null | string;
+    purpose: null | string;
+    usage_hints: null | string;
+    keywords: null | string[];
+    set_type: 'filter' | 'full';
+    mode: 'auto' | 'manual' | 'mixed' | null;
+    criteria: JsonObject | null;
+    embedding_config_id: null | string;
+    truncate_dim: null | number;
+    auto_embed_rules: JsonObject | null;
+    index_status: string;
+    index_type: null | string;
+    last_indexed_at: null | string;
+    document_count: null | number;
+    embedding_count: null | number;
+    embeddings_current: boolean | null;
+    index_size_bytes: null | number;
+    is_system: boolean | null;
+    is_active: boolean | null;
+    auto_refresh: boolean | null;
+    refresh_interval: null | string;
+    last_refresh_at: null | string;
+    agent_metadata: JsonObject | null;
+    created_at: string;
+    updated_at: string;
+    created_by: null | string;
+}
+interface NativeEmbeddingMember {
+    embedding_set_id: string;
+    note_id: string;
+    membership_type: null | string;
+    added_at: null | string;
+    added_by: null | string;
 }
 /**
- * Backend-neutral note record. `source`/`starred`/`archived` are optional
- * because lean read paths (PGlite full-text search) do not return them; list,
- * get, and every shard path populate all fields.
+ * EmbeddingSetsRepository - named, filter, and virtual embedding set API.
  */
-interface BackendNote {
-    id: string;
-    title: null | string;
-    tags: string[];
-    createdAt: string;
-    updatedAt: string;
-    source?: string;
-    starred?: boolean;
-    archived?: boolean;
+type EmbeddingSetKind = 'filter' | 'physical' | 'virtual';
+type EmbeddingSetMode = 'auto' | 'manual' | 'mixed';
+interface EmbeddingSetCriteria {
+    query?: string;
+    tags?: string[];
+    collectionIds?: string[];
+    conceptIds?: string[];
+    noteIds?: string[];
+    sources?: string[];
+    formats?: string[];
+    visibilities?: string[];
+    isStarred?: boolean;
+    isArchived?: boolean;
+    hasTitle?: boolean;
+    hasEmbedding?: boolean;
+    isUserEdited?: boolean;
+    hasAiMetadata?: boolean;
+    hasRevisions?: boolean;
+    minGenerationCount?: number;
+    maxGenerationCount?: number;
+    updatedAfter?: string;
+    updatedBefore?: string;
 }
-/** A note plus its current rendered content. */
-interface BackendNoteFull extends BackendNote {
-    content: string;
-    /** Native note metadata, separate from inference metadata where supported. */
-    metadata?: unknown;
-    links?: BackendLink[];
-    concepts?: BackendConcept[];
-    provenance?: BackendProvenanceEdge[];
-    /** Server revision/activity graph; not interchangeable with local provenance edges. */
-    provenanceGraph?: RemoteProvenanceGraph;
+interface EmbeddingSetFreshness {
+    status: 'fresh' | 'stale' | 'unknown';
+    sourceHash?: string;
+    checkedAt?: string;
+    reason?: string;
 }
-interface BackendLink {
-    id: string;
-    fromNoteId: string;
-    toNoteId: null | string;
-    toUrl?: null | string;
-    kind: string;
-    score: null | number;
-    createdAt: string;
-    metadata?: Record<string, unknown>;
-    /** Exact server JSON metadata, including non-object values and null. */
-    remoteMetadata?: unknown;
-    /** Relative to the requested note; remote self-links can appear in both directions. */
-    direction?: 'incoming' | 'outgoing';
-    snippet?: null | string;
+interface EmbeddingCompatibilityPolicy {
+    model: 'allow-compatible-family' | 'require-same';
+    dimension: 'allow-truncation' | 'require-same';
+    duplicateVectors: 'error' | 'prefer-latest' | 'prefer-set-order';
+    missingVectors: 'error' | 'include-unembedded-note' | 'omit';
 }
-interface BackendConcept {
-    id: string;
-    schemeId: string;
-    prefLabel: string;
-    altLabels: string[];
-    definition: null | string;
-    createdAt: string;
-    updatedAt: string;
-    /** Placeholder values for these fields are unavailable, not evidence of absence. */
-    unavailableFields?: Array<'altLabels' | 'definition'>;
-    assignment?: {
-        confidence?: number;
-        createdAt: string;
-        createdBy?: string;
-        isPrimary: boolean;
-        noteId: string;
-        relevanceScore: number;
-        source: string;
-    };
+interface VirtualMaterializationPolicy {
+    allowed: boolean;
+    includeResolvedMembers?: boolean;
+    includeResolvedEdges?: boolean;
+    freshness: 'fresh' | 'stale' | 'unknown';
+    inputHash?: string;
+    generatedAt?: string;
+    resolvedMemberCount?: number;
 }
-interface BackendProvenanceEdge {
-    id: string;
-    entityType: string;
-    entityId: string;
-    activity: string;
-    agent: null | string;
-    startedAt: string;
-    endedAt: null | string;
-    attributes: unknown;
+interface CriteriaVirtualSource {
+    type: 'criteria';
+    baseSetId: string;
+    criteria: EmbeddingSetCriteria;
 }
-/** One search hit — note plus optional rank/snippet when the backend ranks. */
-interface BackendSearchHit {
-    note: BackendNote;
-    rank?: number;
-    snippet?: string;
-    /** Original remote search metadata; detail enrichment is a separate read. */
-    remoteSearch?: RemoteSearchMetadata;
+interface SetOperationVirtualSource {
+    type: 'set-operation';
+    operation: 'difference' | 'intersection' | 'union';
+    setIds: string[];
 }
-/** Search response with optional facet counts. */
-interface BackendSearchResult {
-    hits: BackendSearchHit[];
-    total: number;
-    facets?: {
-        source?: Record<string, number>;
-        tags: Record<string, number>;
-    };
+interface FallbackVirtualSource {
+    type: 'fallback';
+    preferredSetIds: string[];
 }
-interface BackendListOptions {
-    offset?: number;
-    limit?: number;
+interface LatestCompatibleVirtualSource {
+    type: 'latest-compatible';
+    candidateSetIds: string[];
+    model?: string;
+    dimension?: number;
 }
-interface BackendSearchQueryOptions extends BackendListOptions {
-    /** AND-filter: note must carry every listed tag. */
-    tags?: string[];
-    /** OR-filter on note source. */
-    source?: string[];
+interface SnapshotVirtualSource {
+    type: 'snapshot';
+    snapshotId: string;
+    sourceDefinitionId: string;
+    generatedAt: string;
+    inputHash: string;
 }
-/**
- * Uniform tool-intent operation interface. Every backend implements the read
- * core; `getNoteFull`, `semantic`, and `manageNote` are optional and present
- * only on backends whose capabilities advertise them.
- */
-interface DataBackend {
-    readonly id: string;
-    readonly capabilities: BackendCapabilities;
-    listNotes(options?: BackendListOptions): Promise<{
-        items: BackendNote[];
-        total: number;
-    }>;
-    getNote(id: string): Promise<BackendNote | null>;
-    search(query: string, options?: BackendSearchQueryOptions): Promise<BackendSearchResult>;
-    /** Lazy full content (present when capabilities.read). */
-    getNoteFull?(id: string): Promise<BackendNoteFull | null>;
-    /** Note links (present when capabilities.read). */
-    linksOf?(id: string): Promise<BackendLink[]>;
-    /** SKOS concepts assigned to a note (present when capabilities.read). */
-    conceptsOf?(id: string): Promise<BackendConcept[]>;
-    /** W3C PROV edges for a note (present when capabilities.read). */
-    provenanceOf?(id: string): Promise<BackendProvenanceEdge[]>;
-    /** Remote revision/activity graph, preserving the server model and field names. */
-    provenanceGraphOf?(id: string): Promise<RemoteProvenanceGraph>;
-    /** Vector search (present when capabilities.semantic !== 'none'). */
-    semantic?(query: string, k?: number): Promise<BackendSearchHit[]>;
-    /** Write op (present when capabilities.write). */
-    manageNote?(input: unknown): Promise<unknown>;
-}
-/** What a caller needs. Booleans require `true`; `semantic` is a minimum tier. */
-interface BackendRequest {
-    read?: boolean;
-    write?: boolean;
-    merge?: boolean;
-    multiUser?: boolean;
-    /** Minimum acceptable semantic tier (a higher tier satisfies a lower request). */
-    semantic?: BackendSemanticTier;
+type VirtualEmbeddingSetSource = CriteriaVirtualSource | FallbackVirtualSource | LatestCompatibleVirtualSource | SetOperationVirtualSource | SnapshotVirtualSource;
+interface VirtualEmbeddingSetDefinition {
+    id: string;
+    name: string;
+    purpose?: null | string;
+    source: VirtualEmbeddingSetSource;
+    compatibility: EmbeddingCompatibilityPolicy;
+    materialization?: VirtualMaterializationPolicy;
+    createdAt?: string;
+    updatedAt?: string;
 }
-interface BackendCandidate {
-    backend: DataBackend;
-    /** Requested capabilities this backend cannot satisfy ([] = fully satisfies). */
-    missing: string[];
+interface EmbeddingSetSelector {
+    kind: 'default' | 'embedding-set' | 'virtual-definition';
+    embeddingSetId?: string;
+    definition?: VirtualEmbeddingSetDefinition;
 }
-interface BackendSelection {
-    /** Chosen backend — fully-satisfying-and-lightest, else fewest-missing. Null only when no backends are available. */
-    backend: DataBackend | null;
-    capabilities: BackendCapabilities | null;
-    /** Requested capabilities the chosen backend cannot satisfy. */
-    missing: string[];
-    /** Every candidate with its own missing set, ordered as evaluated. */
-    candidates: BackendCandidate[];
+interface EmbeddingSetDescriptor {
+    id: string;
+    name: string;
+    purpose?: null | string;
+    kind: EmbeddingSetKind;
+    mode?: EmbeddingSetMode;
+    model?: string;
+    dimension?: number;
+    truncateDimension?: null | number;
+    criteria?: EmbeddingSetCriteria | null;
+    createdAt?: string;
+    updatedAt?: string;
+    freshness?: EmbeddingSetFreshness;
 }
-/**
- * Pick the backend that best satisfies `request` from `available`. Prefers a
- * fully-satisfying backend with the lightest startup cost; if none fully
- * satisfy, returns the one missing the fewest capabilities (lightest on ties) so
- * the caller can degrade with eyes open via `selection.missing`.
- */
-declare function selectBackend(request: BackendRequest, available: DataBackend[]): BackendSelection;
-interface PGliteBackendOptions {
-    id?: string;
-    /** Whether embeddings exist so search can use the semantic path. */
-    semanticAvailable?: boolean;
+type VirtualEmbeddingSetValidationError = {
+    code: 'duplicate-vector';
+    noteId: string;
+    setIds: string[];
+} | {
+    code: 'missing-vector';
+    noteId: string;
+    setId: string;
+} | {
+    code: 'mixed-dimensions';
+    setIds: string[];
+} | {
+    code: 'mixed-models';
+    setIds: string[];
+} | {
+    code: 'stale-snapshot';
+    snapshotId: string;
+} | {
+    code: 'unsupported-criteria';
+    field: string;
+};
+interface ResolvedEmbeddingRow {
+    note_id: string;
+    embedding_set_id: string;
+    embedding_id: string;
+    vector: string;
+    created_at: Date | null;
 }
-/**
- * Wrap a PGlite-backed `DatabaseClient` as a `DataBackend`. Read ops delegate to
- * the repositories; writes go through the `manageNote` tool. Advertises full
- * read+write+merge with `ann-full` semantic when embeddings are present.
- */
-declare function createPGliteBackend(db: DatabaseClient, options?: PGliteBackendOptions): DataBackend;
-interface RemoteBackendPaths {
-    notes: string;
-    note: string;
-    search: string;
-    links: string;
-    concepts: string;
-    provenance: string;
-    restore: string;
-    /** @deprecated Tool-intent path overrides cannot adapt the REST contract and are rejected. */
-    manageNote?: string;
-    /** @deprecated Semantic search uses the search path and mode parameter. Overrides are rejected. */
-    semantic?: string;
+interface ResolvedEmbeddingSet {
+    selector: EmbeddingSetSelector;
+    rows: ResolvedEmbeddingRow[];
+    noteIds: string[];
+    embeddingIds: string[];
+    errors: VirtualEmbeddingSetValidationError[];
+    freshness: EmbeddingSetFreshness;
+    resolutionSource: 'live' | 'materialized';
 }
-interface RemoteSearchOptions extends BackendSearchQueryOptions {
-    mode?: RemoteSearchMode;
+interface EmbeddingConfigRow extends Omit<NativeEmbeddingConfig, 'created_at' | 'updated_at'> {
+    created_at: Date;
+    updated_at: Date;
 }
-interface RemoteSearchResult extends BackendSearchResult {
-    /** The server total counts returned hits, not the corpus or a pagination estimate. */
-    totalKind: 'returned-hits';
-    requestedMode: RemoteSearchMode;
-    effectiveMode: RemoteSearchMode;
-    degraded: boolean;
-    degradation?: RemoteSearchDegradation;
+interface EmbeddingMemberRow extends Omit<NativeEmbeddingMember, 'added_at'> {
+    embedding_id: null | string;
+    added_at: Date | null;
 }
-interface RemoteManageNoteResult {
-    action: 'archive' | 'create' | 'delete' | 'restore' | 'star' | 'unarchive' | 'unstar' | 'update';
-    note_id: string;
-    /** Present only when the mutation itself returns a note envelope. */
-    note?: BackendNoteFull;
+interface EmbeddingRow {
+    id: string;
+    note_id: null | string;
+    embedding_set_id: null | string;
+    chunk_index: number;
+    text: string;
+    vector: null | string;
+    model: null | string;
+    contract_fingerprint: null | string;
+    shard_contract_fingerprint_present: boolean;
+    created_at: Date | null;
 }
-interface RemoteDataBackend extends DataBackend {
-    search(query: string, options?: RemoteSearchOptions): Promise<RemoteSearchResult>;
-    semanticWithReport(query: string, k?: number): Promise<RemoteSearchResult>;
-    manageNote(input: unknown): Promise<RemoteManageNoteResult>;
+interface EmbeddingSetRow extends Partial<Omit<NativeEmbeddingSet, 'created_at' | 'criteria' | 'keywords' | 'mode' | 'set_type' | 'truncate_dim' | 'updated_at'>> {
+    id: string;
+    name: string;
+    purpose: null | string;
+    model_name: string;
+    dimensions: number;
+    kind: EmbeddingSetKind;
+    mode: EmbeddingSetMode | null;
+    truncate_dimension: null | number;
+    criteria_json: null | unknown;
+    source_json: null | unknown;
+    compatibility_json: null | unknown;
+    materialization_json: null | unknown;
+    freshness_json: null | unknown;
+    created_at: Date;
+    updated_at: Date;
 }
-interface RemoteBackendConfig {
-    baseUrl: string;
+interface EmbeddingSetCreateInput {
     id?: string;
-    fetchImpl?: typeof fetch;
-    headers?: (() => HeadersInit | Promise<HeadersInit>) | HeadersInit;
-    authToken?: string;
-    paths?: Partial<RemoteBackendPaths>;
+    name: string;
+    slug?: null | string;
+    purpose?: null | string;
+    model_name?: string;
+    dimensions?: number;
+    kind?: EmbeddingSetKind;
+    mode?: EmbeddingSetMode | null;
+    truncate_dimension?: null | number;
+    criteria?: EmbeddingSetCriteria | null;
 }
-declare function createRemoteBackend(config: RemoteBackendConfig): RemoteDataBackend;
-interface ShardBackendOptions {
+interface EmbeddingSetEmbeddingInput {
     id?: string;
-    /** Declared semantic tier this shard provides (default `none`). Set to `cosine-small` when the reader has a vector provider. */
-    semantic?: BackendSemanticTier;
+    note_id: string;
+    embedding_set_id: string;
+    vector: number[];
 }
-/**
- * Wrap a `ShardReader` (#189) as a read-only `DataBackend`. Startup is instant
- * (no index build) and the semantic tier is whatever the reader's provider
- * offers — `none` for text/facets-only shards, `cosine-small` when a vector
- * provider is attached.
- */
-declare function createShardBackend(reader: ShardReader, options?: ShardBackendOptions): DataBackend;
-declare const provenanceGraph: z.ZodObject<{
-    all_activities: z.ZodArray<z.ZodObject<{
-        activity_type: z.ZodString;
-        ended_at: z.ZodNullable<z.ZodString>;
-        id: z.ZodEffects<z.ZodString, string, string>;
-        metadata: z.ZodEffects<z.ZodUnknown, {} | null, unknown>;
-        model_name: z.ZodNullable<z.ZodString>;
-        note_id: z.ZodEffects<z.ZodString, string, string>;
-        revision_id: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
-        started_at: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        activity_type: string;
-        ended_at: null | string;
+declare class EmbeddingSetsRepository {
+    private db;
+    constructor(db: QueryExecutor);
+    getConfig(id: string): Promise<EmbeddingConfigRow>;
+    listConfigs(): Promise<EmbeddingConfigRow[]>;
+    listMembers(setId: string): Promise<EmbeddingMemberRow[]>;
+    /** Includes metadata-only records and every chunk, unlike a resolved graph selector. */
+    listEmbeddings(setId: string): Promise<EmbeddingRow[]>;
+    create(input: EmbeddingSetCreateInput): Promise<EmbeddingSetRow>;
+    createVirtualDefinition(input: VirtualEmbeddingSetDefinition): Promise<EmbeddingSetRow>;
+    ensureDefault(): Promise<EmbeddingSetRow>;
+    get(id: string): Promise<EmbeddingSetRow>;
+    list(): Promise<EmbeddingSetRow[]>;
+    listDescriptors(): Promise<EmbeddingSetDescriptor[]>;
+    toDescriptor(row: EmbeddingSetRow): EmbeddingSetDescriptor;
+    putEmbedding(input: EmbeddingSetEmbeddingInput): Promise<{
         id: string;
-        metadata: {} | null;
-        model_name: null | string;
-        note_id: string;
-        revision_id: null | string;
-        started_at: string;
-    }, {
-        activity_type: string;
-        ended_at: null | string;
-        id: string;
-        metadata?: unknown;
-        model_name: null | string;
-        note_id: string;
-        revision_id: null | string;
-        started_at: string;
-    }>, "many">;
-    all_edges: z.ZodArray<z.ZodObject<{
-        created_at_utc: z.ZodString;
-        id: z.ZodEffects<z.ZodString, string, string>;
-        relation: z.ZodString;
-        revision_id: z.ZodEffects<z.ZodString, string, string>;
-        source_note_id: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
-        source_url: z.ZodNullable<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        created_at_utc: string;
-        id: string;
-        relation: string;
-        revision_id: string;
-        source_note_id: null | string;
-        source_url: null | string;
-    }, {
-        created_at_utc: string;
-        id: string;
-        relation: string;
-        revision_id: string;
-        source_note_id: null | string;
-        source_url: null | string;
-    }>, "many">;
-    current_chain: z.ZodNullable<z.ZodObject<{
-        activity: z.ZodNullable<z.ZodObject<{
-            activity_type: z.ZodString;
-            ended_at: z.ZodNullable<z.ZodString>;
-            id: z.ZodEffects<z.ZodString, string, string>;
-            metadata: z.ZodEffects<z.ZodUnknown, {} | null, unknown>;
-            model_name: z.ZodNullable<z.ZodString>;
-            note_id: z.ZodEffects<z.ZodString, string, string>;
-            revision_id: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
-            started_at: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            activity_type: string;
-            ended_at: null | string;
-            id: string;
-            metadata: {} | null;
-            model_name: null | string;
-            note_id: string;
-            revision_id: null | string;
-            started_at: string;
-        }, {
-            activity_type: string;
-            ended_at: null | string;
-            id: string;
-            metadata?: unknown;
-            model_name: null | string;
-            note_id: string;
-            revision_id: null | string;
-            started_at: string;
-        }>>;
-        edges: z.ZodArray<z.ZodObject<{
-            created_at_utc: z.ZodString;
-            id: z.ZodEffects<z.ZodString, string, string>;
-            relation: z.ZodString;
-            revision_id: z.ZodEffects<z.ZodString, string, string>;
-            source_note_id: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
-            source_url: z.ZodNullable<z.ZodString>;
-        }, "strip", z.ZodTypeAny, {
-            created_at_utc: string;
-            id: string;
-            relation: string;
-            revision_id: string;
-            source_note_id: null | string;
-            source_url: null | string;
-        }, {
-            created_at_utc: string;
-            id: string;
-            relation: string;
-            revision_id: string;
-            source_note_id: null | string;
-            source_url: null | string;
-        }>, "many">;
-        note_id: z.ZodEffects<z.ZodString, string, string>;
-        revision_id: z.ZodEffects<z.ZodString, string, string>;
-    }, "strip", z.ZodTypeAny, {
-        activity: {
-            activity_type: string;
-            ended_at: null | string;
-            id: string;
-            metadata: {} | null;
-            model_name: null | string;
-            note_id: string;
-            revision_id: null | string;
-            started_at: string;
-        } | null;
-        edges: {
-            created_at_utc: string;
-            id: string;
-            relation: string;
-            revision_id: string;
-            source_note_id: null | string;
-            source_url: null | string;
-        }[];
-        note_id: string;
-        revision_id: string;
-    }, {
-        activity: {
-            activity_type: string;
-            ended_at: null | string;
-            id: string;
-            metadata?: unknown;
-            model_name: null | string;
-            note_id: string;
-            revision_id: null | string;
-            started_at: string;
-        } | null;
-        edges: {
-            created_at_utc: string;
-            id: string;
-            relation: string;
-            revision_id: string;
-            source_note_id: null | string;
-            source_url: null | string;
-        }[];
-        note_id: string;
-        revision_id: string;
-    }>>;
-    derived_count: z.ZodNumber;
-    derived_notes: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
-    note_id: z.ZodEffects<z.ZodString, string, string>;
-}, "strip", z.ZodTypeAny, {
-    all_activities: {
-        activity_type: string;
-        ended_at: null | string;
-        id: string;
-        metadata: {} | null;
-        model_name: null | string;
-        note_id: string;
-        revision_id: null | string;
-        started_at: string;
-    }[];
-    all_edges: {
-        created_at_utc: string;
-        id: string;
-        relation: string;
-        revision_id: string;
-        source_note_id: null | string;
-        source_url: null | string;
-    }[];
-    current_chain: {
-        activity: {
-            activity_type: string;
-            ended_at: null | string;
-            id: string;
-            metadata: {} | null;
-            model_name: null | string;
-            note_id: string;
-            revision_id: null | string;
-            started_at: string;
-        } | null;
-        edges: {
-            created_at_utc: string;
-            id: string;
-            relation: string;
-            revision_id: string;
-            source_note_id: null | string;
-            source_url: null | string;
-        }[];
-        note_id: string;
-        revision_id: string;
-    } | null;
-    derived_count: number;
-    derived_notes: string[];
-    note_id: string;
-}, {
-    all_activities: {
-        activity_type: string;
-        ended_at: null | string;
-        id: string;
-        metadata?: unknown;
-        model_name: null | string;
-        note_id: string;
-        revision_id: null | string;
-        started_at: string;
+    }>;
+    resolveSelector(selector: EmbeddingSetSelector): Promise<ResolvedEmbeddingSet>;
+    refreshMaterializedVirtualSet(setId: string): Promise<ResolvedEmbeddingSet>;
+    markVirtualSetStale(setId: string, reason: string): Promise<void>;
+    /** @internal The repository and mutation must use the same caller-owned transaction. */
+    withMaterializationInvalidation<T>(mutate: () => Promise<T>): Promise<T>;
+    private liveResolutionHash;
+    private resolveDefinition;
+    private resolvePhysicalSet;
+    private resolvePhysicalRows;
+    private resolveMaterializedRows;
+    private resolveCriteriaSource;
+    private resolveSetOperationSource;
+    private resolveFallbackSource;
+    private resolveLatestCompatibleSource;
+    private validateCompatibility;
+    private resolveDuplicateRows;
+    private finalizeResolution;
+    private resolutionInputHash;
+    private definitionFromRow;
+    private inferDefinitionModel;
+    private inferDefinitionDimension;
+}
+/**
+ * Shared types for repository layer.
+ * All repository methods use these types as inputs and outputs.
+ */
+interface NoteSummary {
+    id: string;
+    title: null | string;
+    format: string;
+    source: string;
+    visibility: string;
+    is_starred: boolean;
+    is_pinned: boolean;
+    is_archived: boolean;
+    created_at: Date;
+    updated_at: Date;
+    deleted_at: Date | null;
+    tags: string[];
+}
+interface NoteFull extends NoteSummary {
+    /** Note metadata is independent of the current revision's AI metadata. */
+    metadata?: unknown;
+    archive_id: null | string;
+    revision_mode: string;
+    original: {
+        content_hash: string;
+        content: string;
+        created_at: Date;
+        id: null | string;
+        user_created_at?: null | string;
+        user_last_edited_at?: null | string;
+        version_number?: number;
+    };
+    current: {
+        ai_metadata: null | unknown;
+        content: string;
+        generation_count: number;
+        is_user_edited: boolean;
+        last_revision_id?: null | string;
+        model: null | string;
+        updated_at: Date;
+    };
+}
+interface NoteCreateInput {
+    metadata?: unknown;
+    content: string;
+    title?: string;
+    format?: string;
+    source?: string;
+    visibility?: string;
+    tags?: string[];
+    archive_id?: string;
+    /**
+     * Explicit primary key. When omitted a UUIDv7 is minted (the default). Supply
+     * this only for deterministic seeding or cross-instance identity — e.g. two
+     * in-browser databases that must agree on a shared note's id so a shard swap
+     * can dedupe it under the `skip` conflict strategy.
+     */
+    id?: string;
+}
+interface NoteUpdateInput {
+    metadata?: unknown;
+    title?: string;
+    content?: string;
+    format?: string;
+    visibility?: string;
+}
+interface NoteListOptions {
+    limit?: number;
+    offset?: number;
+    sort?: 'created_at' | 'title' | 'updated_at';
+    order?: 'asc' | 'desc';
+    is_starred?: boolean;
+    is_pinned?: boolean;
+    is_archived?: boolean;
+    include_deleted?: boolean;
+    include_archived?: boolean;
+    collection_id?: string;
+    tags?: string[];
+}
+interface PaginatedResult<T> {
+    items: T[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+interface SearchResult {
+    id: string;
+    title: null | string;
+    snippet: string;
+    rank: number;
+    created_at: Date;
+    updated_at: Date;
+    tags: string[];
+    has_embedding?: boolean;
+    locators?: EvidenceLocator[];
+    /** Candidate matched-unit citations, separate from legacy source projections. */
+    evidence?: SearchEvidenceSet;
+}
+interface SearchFacets {
+    tags: {
+        count: number;
+        tag: string;
     }[];
-    all_edges: {
-        created_at_utc: string;
+    collections: {
+        count: number;
         id: string;
-        relation: string;
-        revision_id: string;
-        source_note_id: null | string;
-        source_url: null | string;
+        name: string;
     }[];
-    current_chain: {
-        activity: {
-            activity_type: string;
-            ended_at: null | string;
-            id: string;
-            metadata?: unknown;
-            model_name: null | string;
-            note_id: string;
-            revision_id: null | string;
-            started_at: string;
-        } | null;
-        edges: {
-            created_at_utc: string;
-            id: string;
-            relation: string;
-            revision_id: string;
-            source_note_id: null | string;
-            source_url: null | string;
-        }[];
-        note_id: string;
-        revision_id: string;
-    } | null;
-    derived_count: number;
-    derived_notes: string[];
-    note_id: string;
-}>;
-/** Producer field names intentionally distinguish this graph from local PGlite PROV edges. */
-type RemoteProvenanceGraph = z.infer<typeof provenanceGraph>;
-declare const searchMode: z.ZodEnum<[
-    "fts",
-    "semantic",
-    "hybrid"
-]>;
-type RemoteSearchMode = z.infer<typeof searchMode>;
-declare const searchHit: z.ZodObject<{
-    chain_info: z.ZodOptional<z.ZodObject<{
-        best_chunk_sequence: z.ZodNumber;
-        chain_id: z.ZodEffects<z.ZodString, string, string>;
-        chunks_matched: z.ZodNumber;
-        original_title: z.ZodString;
-        total_chunks: z.ZodNumber;
-    }, "strip", z.ZodTypeAny, {
-        best_chunk_sequence: number;
-        chain_id: string;
-        chunks_matched: number;
-        original_title: string;
-        total_chunks: number;
-    }, {
-        best_chunk_sequence: number;
-        chain_id: string;
-        chunks_matched: number;
-        original_title: string;
-        total_chunks: number;
-    }>>;
-    embedding_status: z.ZodOptional<z.ZodEnum<[
-        "ready",
-        "pending",
-        "failed",
-        "none"
-    ]>>;
-    note_id: z.ZodEffects<z.ZodString, string, string>;
-    score: z.ZodNumber;
-    snippet: z.ZodNullable<z.ZodString>;
-    tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    title: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    chain_info?: {
-        best_chunk_sequence: number;
-        chain_id: string;
-        chunks_matched: number;
-        original_title: string;
-        total_chunks: number;
-    } | undefined;
-    embedding_status?: "failed" | "none" | "pending" | "ready" | undefined;
+}
+interface SearchResponse {
+    results: SearchResult[];
+    total: number;
+    query: string;
+    mode: 'hybrid' | 'semantic' | 'text';
+    semantic_available: boolean;
+    limit: number;
+    offset: number;
+    facets?: SearchFacets;
+}
+interface SearchOptions {
+    limit?: number;
+    offset?: number;
+    tags?: string[];
+    /** Require every tag; the existing tags option retains its ANY semantics. */
+    tagsAll?: string[];
+    collection_id?: string;
+    date_from?: Date;
+    date_to?: Date;
+    is_starred?: boolean;
+    is_archived?: boolean;
+    format?: string;
+    source?: string;
+    /** Match any listed source before ranking. */
+    sources?: string[];
+    visibility?: string;
+    tenant_id?: string;
+    archive_id?: null | string;
+    metadataPredicates?: readonly MetadataPredicate[];
+    include_facets?: boolean;
+    mode?: 'auto' | 'hybrid' | 'semantic' | 'text';
+    embeddingSetId?: string;
+    embeddingSetSelector?: EmbeddingSetSelector;
+}
+interface NoteRevision {
+    id: string;
     note_id: string;
-    score: number;
-    snippet: null | string;
-    tags?: string[] | undefined;
-    title?: string | undefined;
-}, {
-    chain_info?: {
-        best_chunk_sequence: number;
-        chain_id: string;
-        chunks_matched: number;
-        original_title: string;
-        total_chunks: number;
-    } | undefined;
-    embedding_status?: "failed" | "none" | "pending" | "ready" | undefined;
+    revision_number: number;
+    type: string;
+    content: string;
+    ai_metadata: null | unknown;
+    model: null | string;
+    created_at: Date;
+    parent_revision_id?: null | string;
+    summary?: null | string;
+    rationale?: null | string;
+    created_at_utc?: null | string;
+    ai_generated_at?: null | string;
+    user_last_edited_at?: null | string;
+    is_user_edited?: boolean;
+    generation_count?: number;
+}
+interface OriginalContentRevision {
+    id: string;
     note_id: string;
-    score: number;
-    snippet: null | string;
-    tags?: string[] | undefined;
-    title?: string | undefined;
-}>;
-declare const searchDegradation: z.ZodObject<{
-    code: z.ZodString;
-    effective_mode: z.ZodEnum<[
-        "fts",
-        "semantic",
-        "hybrid"
-    ]>;
-}, "strip", z.ZodTypeAny, {
-    code: string;
-    effective_mode: "fts" | "hybrid" | "semantic";
-}, {
-    code: string;
-    effective_mode: "fts" | "hybrid" | "semantic";
-}>;
-type RemoteSearchDegradation = z.infer<typeof searchDegradation>;
-type RemoteSearchMetadata = Pick<z.infer<typeof searchHit>, 'chain_info' | 'embedding_status' | 'tags' | 'title'>;
-declare const manageInput: z.ZodUnion<[
-    z.ZodObject<{
-        action: z.ZodLiteral<"create">;
-        content: z.ZodString;
-        source: z.ZodOptional<z.ZodString>;
-        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    }, "strict", z.ZodTypeAny, {
-        action: "create";
-        content: string;
-        source?: string | undefined;
-        tags?: string[] | undefined;
-        title?: null | string | undefined;
-    }, {
-        action: "create";
-        content: string;
-        source?: string | undefined;
-        tags?: string[] | undefined;
-        title?: null | string | undefined;
-    }>,
-    z.ZodEffects<z.ZodObject<{
-        action: z.ZodLiteral<"update">;
-        content: z.ZodOptional<z.ZodString>;
-        note_id: z.ZodEffects<z.ZodString, string, string>;
-        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    }, "strict", z.ZodTypeAny, {
-        action: "update";
-        content?: string | undefined;
-        note_id: string;
-        tags?: string[] | undefined;
-    }, {
-        action: "update";
-        content?: string | undefined;
-        note_id: string;
-        tags?: string[] | undefined;
-    }>, {
-        action: "update";
-        content?: string | undefined;
-        note_id: string;
-        tags?: string[] | undefined;
-    }, {
-        action: "update";
-        content?: string | undefined;
-        note_id: string;
-        tags?: string[] | undefined;
-    }>,
-    z.ZodObject<{
-        action: z.ZodEnum<[
-            "delete",
-            "restore",
-            "archive",
-            "unarchive",
-            "star",
-            "unstar"
-        ]>;
-        note_id: z.ZodEffects<z.ZodString, string, string>;
-    }, "strict", z.ZodTypeAny, {
-        action: "archive" | "delete" | "restore" | "star" | "unarchive" | "unstar";
-        note_id: string;
-    }, {
-        action: "archive" | "delete" | "restore" | "star" | "unarchive" | "unstar";
-        note_id: string;
-    }>
-]>;
-type RemoteManageNoteInput = z.infer<typeof manageInput>;
+    version_number: number;
+    content: string;
+    hash: string;
+    created_at_utc: string;
+    created_by: string;
+}
+declare const REGISTERED_METADATA_PATHS: readonly [
+    "provider",
+    "model",
+    "role",
+    "event_kind",
+    "sensitivity",
+    "import_run_id"
+];
+type RegisteredMetadataPath = typeof REGISTERED_METADATA_PATHS[number];
+type MetadataPredicate = {
+    gte?: number | string;
+    lte?: number | string;
+    op: 'range';
+    path: RegisteredMetadataPath;
+} | {
+    op: 'eq';
+    path: RegisteredMetadataPath;
+    value: boolean | null | number | string;
+} | {
+    op: 'exists';
+    path: RegisteredMetadataPath;
+    value?: boolean;
+} | {
+    op: 'in';
+    path: RegisteredMetadataPath;
+    value: readonly (boolean | null | number | string)[];
+};
+interface EvidenceLocator {
+    note_id: string;
+    chunk?: {
+        index: number;
+        kind: 'attachment' | 'current' | 'title';
+    };
+    span?: {
+        end: number;
+        start: number;
+    };
+    source?: {
+        external_id_hash: string;
+        import_run_id: string;
+        namespace: string;
+        schema_version: string;
+    };
+    metadata_paths: RegisteredMetadataPath[];
+}
+interface MetadataPredicateConditionResult {
+    conditions: string[];
+    joins: string[];
+    params: unknown[];
+    nextIdx: number;
+}
+type ScopeOptions = Pick<SearchOptions, 'archive_id' | 'metadataPredicates' | 'tenant_id'>;
+declare function buildMetadataPredicateConditions(options: ScopeOptions, startIdx: number): MetadataPredicateConditionResult;
+interface RemoteEvidenceResolutionOptions {
+    metadataPredicates?: readonly MetadataPredicate[];
+    includeArchived?: boolean;
+    /** Cancels header lookup, transport and response reading; a 30-second ceiling also applies. */
+    signal?: AbortSignal;
+}
 /**
- * Capability module system (ADR-002).
- * Tracks opt-in WASM module states. No WASM loaded by default (CAP-001).
+ * Backend seam (#191) — a uniform tool-intent operation interface that lets the
+ * PGlite database backend (#187) and the static-file shard backend (#189) be
+ * selected and dispatched against the same way, plus a capability-negotiation
+ * API so a caller asks for the operations it needs and gets the lightest backend
+ * that provides them.
  *
- * State machine (valid transitions):
- *   unloaded  -> loading  (via enable)
- *   loading   -> ready    (via markReady or successful loader)
- *   loading   -> error    (via markError or failed loader)
- *   ready     -> disabled (via disable)
- *   disabled  -> loading  (via enable, re-enable)
- *   error     -> loading  (via enable, retry)
+ * The seam sits one level above SQL: every adapter exposes the same read
+ * operations (and optional relationship, write, semantic, and full-content ops)
+ * regardless of whether the data lives in a queryable PGlite instance, a set of
+ * static shard files fetched over HTTP, or the Fortemi server tier.
  */
-type CapabilityState = 'disabled' | 'error' | 'loading' | 'ready' | 'unloaded';
-type CapabilityName = 'audio' | 'llm' | 'pdf' | 'semantic' | 'vision';
-declare class CapabilityManager {
-    private events;
-    private capabilities;
-    private loaders;
-    private progressMessages;
-    constructor(events: TypedEventBus);
-    /**
-     * Register an async loader for a capability.
-     * Called by enable(); if no loader is registered the capability transitions
-     * directly to ready (useful for capabilities that require no async init).
-     */
-    registerLoader(name: CapabilityName, loader: () => Promise<void>): void;
-    getState(name: CapabilityName): CapabilityState;
-    isReady(name: CapabilityName): boolean;
-    /**
-     * Enable a capability.
-     * Valid from: unloaded, disabled, error (retry).
-     * Runs the registered loader if present; transitions to ready on success,
-     * error on failure.
-     */
-    enable(name: CapabilityName): Promise<void>;
-    /**
-     * Disable a ready capability.
-     * Valid from: ready only.
-     */
-    disable(name: CapabilityName): void;
-    /**
-     * Mark a loading capability as ready (external use, e.g. bridge protocol).
-     * Valid from: loading only.
-     */
-    markReady(name: CapabilityName): void;
-    /**
-     * Mark a loading capability as errored (external use, e.g. bridge protocol).
-     * Valid from: loading only.
-     */
-    markError(name: CapabilityName, error: string): void;
-    /**
-     * Report loading progress (0-100).
-     * Emits capability.loading with progress if the capability is currently loading.
-     * No-op if the capability is not in loading state.
-     */
-    reportProgress(name: CapabilityName, progress: number): void;
-    /** Set a human-readable progress message for a loading capability */
-    setProgress(name: CapabilityName, message: string): void;
-    /** Get the current progress message for a capability */
-    getProgress(name: CapabilityName): string | undefined;
-    getError(name: CapabilityName): string | undefined;
-    listAll(): Array<{
-        name: CapabilityName;
-        state: CapabilityState;
-    }>;
-}
 /**
- * Sequential SQL migration runner for DatabaseClient.
- * Tracks applied migrations in a schema_version table.
- * Each migration runs in a transaction; version updated atomically.
+ * Semantic-search tier a backend offers, in increasing capability:
+ * - `none`     — no vector search (text / facets only)
+ * - `cosine-small` — brute-force cosine over a small static vector set (#189)
+ * - `ann-full` — prebuilt/queryable approximate-nearest-neighbour over the full
+ *   corpus (PGlite + pgvector, or a prebuilt ANN snapshot)
+ * - `server`   — delegated to the remote Fortemi server backend
  */
-interface Migration {
-    version: number;
-    name: string;
-    sql: string;
-}
-declare class MigrationRunner {
-    private db;
-    private events?;
-    constructor(db: DatabaseClient, events?: TypedEventBus | undefined);
-    ensureSchemaTable(): Promise<void>;
-    getCurrentVersion(): Promise<number>;
-    apply(migrations: Migration[]): Promise<number>;
-    getAppliedMigrations(): Promise<Array<{
-        name: string;
-        version: number;
-    }>>;
+type BackendSemanticTier = 'ann-full' | 'cosine-small' | 'none' | 'server';
+/** Relative startup cost of bringing a backend online. */
+type BackendStartupCost = 'index-build' | 'instant' | 'network';
+/** What a backend can do — the unit of capability negotiation. */
+interface BackendCapabilities {
+    /** Local candidate-v1 indexed predicate operations, not server contract negotiation. */
+    typedMetadataPredicates?: boolean;
+    /** Complete reproducible citations, not merely partial source projections. */
+    evidenceLocators?: boolean;
+    /** Can answer list / get / search read operations. */
+    read: boolean;
+    /** Can mutate notes (manageNote). */
+    write: boolean;
+    /** Can merge external shards into its store. */
+    merge: boolean;
+    /** Coordinates concurrent multi-user writes. */
+    multiUser: boolean;
+    /** Highest semantic-search tier available. */
+    semantic: BackendSemanticTier;
+    /** Relative cost to bring the backend online. */
+    startupCost: BackendStartupCost;
 }
-declare const allMigrations: Migration[];
 /**
- * Multi-archive manager for Fortemi.
- * Each archive is a separate PGlite instance with its own persistence path.
- * Migrations are applied automatically on open.
+ * Backend-neutral note record. `source`/`starred`/`archived` are optional
+ * because lean read paths (PGlite full-text search) do not return them; list,
+ * get, and every shard path populate all fields.
  */
-interface ArchiveInfo {
-    name: string;
+interface BackendNote {
+    id: string;
+    title: null | string;
+    tags: string[];
     createdAt: string;
+    updatedAt: string;
+    source?: string;
+    starred?: boolean;
+    archived?: boolean;
 }
-declare class ArchiveManager {
-    private events?;
-    private currentArchive;
-    private db;
-    private archives;
-    private persistence;
-    private backendFactory;
-    /**
-     * Persistence is a PLUGGABLE, opt-in backend (issue #261). Pass a
-     * `StorageBackendFactory` to run against any `StorageBackend`
-     * implementation; PGlite is merely the built-in default, selected only when
-     * the convenience `PersistenceMode` string form is used. Because
-     * `defaultStorageBackendFactory` reaches PGlite through the lazily-imported
-     * `createPGliteInstance` (see `db.ts`), a consumer that supplies its own
-     * factory — or never opens an archive at all — never pulls the PGlite WASM
-     * engine into its bundle.
-     *
-     * @param persistenceOrFactory `PersistenceMode` string (uses the built-in
-     *   PGlite backend) OR a custom `StorageBackendFactory`.
-     * @param persistenceOverride persistence hint passed to a custom factory.
-     */
-    constructor(persistenceOrFactory: PersistenceMode | StorageBackendFactory, events?: TypedEventBus | undefined, persistenceOverride?: PersistenceMode);
-    getCurrentArchiveName(): string;
-    getDb(): null | StorageBackend;
-    open(archiveName?: string): Promise<StorageBackend>;
-    /**
-     * Adopt an already-created backend WITHOUT running migrations — for a backend
-     * whose schema is already present, e.g. a PGlite restored from a physical
-     * data-dir snapshot (issue #187, `restoreDbSnapshot`). Running migrations here
-     * would be wrong: the restored dir already carries them (and the HNSW index).
-     */
-    adopt(backend: StorageBackend, archiveName?: string): Promise<StorageBackend>;
-    create(archiveName: string): Promise<StorageBackend>;
-    switchTo(archiveName: string): Promise<StorageBackend>;
-    delete(archiveName: string): Promise<void>;
-    listArchives(): ArchiveInfo[];
-    close(): Promise<void>;
+/** A note plus its current rendered content. */
+interface BackendNoteFull extends BackendNote {
+    content: string;
+    /** Native note metadata, separate from inference metadata where supported. */
+    metadata?: unknown;
+    links?: BackendLink[];
+    concepts?: BackendConcept[];
+    provenance?: BackendProvenanceEdge[];
+    /** Server revision/activity graph; not interchangeable with local provenance edges. */
+    provenanceGraph?: RemoteProvenanceGraph;
 }
-/**
- * Factory function for creating a FortemiCore instance.
- * All deployment modes use this entry point.
- */
-interface FortemiConfig {
-    persistence: 'idb' | 'memory' | 'opfs';
-    archiveName?: string;
+interface BackendLink {
+    id: string;
+    fromNoteId: string;
+    toNoteId: null | string;
+    toUrl?: null | string;
+    kind: string;
+    score: null | number;
+    createdAt: string;
+    metadata?: Record<string, unknown>;
+    /** Exact server JSON metadata, including non-object values and null. */
+    remoteMetadata?: unknown;
+    /** Relative to the requested note; remote self-links can appear in both directions. */
+    direction?: 'incoming' | 'outgoing';
+    snippet?: null | string;
 }
-interface FortemiCore {
-    events: TypedEventBus;
-    config: FortemiConfig;
-    destroy(): void;
+interface BackendConcept {
+    id: string;
+    schemeId: string;
+    prefLabel: string;
+    altLabels: string[];
+    definition: null | string;
+    createdAt: string;
+    updatedAt: string;
+    /** Placeholder values for these fields are unavailable, not evidence of absence. */
+    unavailableFields?: Array<'altLabels' | 'definition'>;
+    assignment?: {
+        confidence?: number;
+        createdAt: string;
+        createdBy?: string;
+        isPrimary: boolean;
+        noteId: string;
+        relevanceScore: number;
+        source: string;
+    };
+}
+interface BackendProvenanceEdge {
+    id: string;
+    entityType: string;
+    entityId: string;
+    activity: string;
+    agent: null | string;
+    startedAt: string;
+    endedAt: null | string;
+    attributes: unknown;
+}
+/** One search hit — note plus optional rank/snippet when the backend ranks. */
+interface BackendSearchHit {
+    note: BackendNote;
+    rank?: number;
+    snippet?: string;
+    /** Original remote search metadata; detail enrichment is a separate read. */
+    remoteSearch?: RemoteSearchMetadata;
+    /** Partial local source projections; does not imply complete citation capability. */
+    locators?: EvidenceLocator[];
+    /** Candidate matched-unit evidence; not a negotiated complete capability. */
+    evidence?: SearchEvidenceSet;
+}
+/** Search response with optional facet counts. */
+interface BackendSearchResult {
+    hits: BackendSearchHit[];
+    total: number;
+    facets?: {
+        source?: Record<string, number>;
+        tags: Record<string, number>;
+    };
+}
+interface BackendListOptions {
+    offset?: number;
+    limit?: number;
+}
+interface BackendSearchQueryOptions extends BackendListOptions {
+    /** AND-filter: note must carry every listed tag. */
+    tags?: string[];
+    /** OR-filter on note source. */
+    source?: string[];
+    mode?: 'fts' | 'hybrid' | 'semantic';
+    metadataPredicates?: readonly MetadataPredicate[];
+    /** Local source-identity selection, never a grant of authorization. */
+    tenant_id?: string;
+    archive_id?: null | string;
 }
-declare function createFortemi(config: FortemiConfig): FortemiCore;
-/**
- * Compute a browser-local content-identity hash (SHA-256), encoded as
- * `sha256:<64-char lowercase hex>`.
- *
- * This is an internal identity/dedup digest used for note content, embedding
- * configs, the AIWG index, and graph identity — NOT the server's attachment
- * content-hash convention. Binary-attachment blobs use {@link computeBlobHash}
- * (BLAKE3), which is the canonical checksum defined by the binary-attachment
- * projection contract (`checksum: "blake3:<hex>"`). Keeping these two functions
- * separate preserves JSON format parity for the identity hashes above while
- * letting attachments match the server's `compute_content_hash`.
- *
- * @param data - Raw bytes to hash
- * @returns `'sha256:<64-char lowercase hex>'`
- */
-declare function computeHash(data: Uint8Array): string;
 /**
- * Compute the canonical attachment content hash: **BLAKE3**, encoded as
- * `blake3:<64-char lowercase hex>`.
- *
- * Matches the fortemi server (`crates/matric-db/src/file_storage.rs`
- * `compute_content_hash`) and the portable Knowledge-Shard byte-sidecar
- * contract, where the sidecar tar entry name is the bare hex (the `blake3:`
- * prefix stripped). SubtleCrypto has no BLAKE3, so this uses `@noble/hashes`.
- *
- * @param data - Raw attachment bytes to hash
- * @returns `'blake3:<64-char lowercase hex>'`
+ * Uniform tool-intent operation interface. Every backend implements the read
+ * core; `getNoteFull`, `semantic`, and `manageNote` are optional and present
+ * only on backends whose capabilities advertise them.
  */
-declare function computeBlobHash(data: Uint8Array): string;
-declare const FORTEMI_COMPATIBILITY_PATH = "/api/v1/system/compatibility";
-declare const FORTEMI_SERVER_COMPATIBILITY_REVISION = "2026-07-06";
-declare const FORTEMI_COMPATIBILITY_STATES: readonly [
-    "available",
-    "degraded",
-    "preview",
-    "unavailable",
-    "unknown"
-];
-type FortemiCompatibilityState = (typeof FORTEMI_COMPATIBILITY_STATES)[number];
-declare const FORTEMI_REQUIRED_COMPATIBILITY_CAPABILITIES: readonly [
-    "core_notes",
-    "search",
-    "jobs",
-    "realtime_activity",
-    "hosted_auth",
-    "premium_components",
-    "backoffice_api",
-    "audit_posture",
-    "quota_status",
-    "kms_status",
-    "mcp_scope_gate"
-];
-type FortemiRequiredCompatibilityCapability = (typeof FORTEMI_REQUIRED_COMPATIBILITY_CAPABILITIES)[number];
-interface FortemiCompatibilityCapability {
-    state: FortemiCompatibilityState;
-    reason_code?: string;
+interface DataBackend {
+    readonly id: string;
+    readonly capabilities: BackendCapabilities;
+    listNotes(options?: BackendListOptions): Promise<{
+        items: BackendNote[];
+        total: number;
+    }>;
+    getNote(id: string): Promise<BackendNote | null>;
+    search(query: string, options?: BackendSearchQueryOptions): Promise<BackendSearchResult>;
+    /** Lazy full content (present when capabilities.read). */
+    getNoteFull?(id: string): Promise<BackendNoteFull | null>;
+    /** Note links (present when capabilities.read). */
+    linksOf?(id: string): Promise<BackendLink[]>;
+    /** SKOS concepts assigned to a note (present when capabilities.read). */
+    conceptsOf?(id: string): Promise<BackendConcept[]>;
+    /** W3C PROV edges for a note (present when capabilities.read). */
+    provenanceOf?(id: string): Promise<BackendProvenanceEdge[]>;
+    /** Remote revision/activity graph, preserving the server model and field names. */
+    provenanceGraphOf?(id: string): Promise<RemoteProvenanceGraph>;
+    /** Vector search (present when capabilities.semantic !== 'none'). */
+    semantic?(query: string, k?: number): Promise<BackendSearchHit[]>;
+    /** Write op (present when capabilities.write). */
+    manageNote?(input: unknown): Promise<unknown>;
+}
+/** What a caller needs. Booleans require `true`; `semantic` is a minimum tier. */
+interface BackendRequest {
+    typedMetadataPredicates?: boolean;
+    evidenceLocators?: boolean;
+    read?: boolean;
+    write?: boolean;
+    merge?: boolean;
+    multiUser?: boolean;
+    /** Minimum acceptable semantic tier (a higher tier satisfies a lower request). */
+    semantic?: BackendSemanticTier;
+}
+interface BackendCandidate {
+    backend: DataBackend;
+    /** Requested capabilities this backend cannot satisfy ([] = fully satisfies). */
+    missing: string[];
+}
+interface BackendSelection {
+    /** Chosen backend — fully-satisfying-and-lightest, else fewest-missing. Null only when no backends are available. */
+    backend: DataBackend | null;
+    capabilities: BackendCapabilities | null;
+    /** Requested capabilities the chosen backend cannot satisfy. */
+    missing: string[];
+    /** Every candidate with its own missing set, ordered as evaluated. */
+    candidates: BackendCandidate[];
 }
-interface FortemiCompatibilityResponse {
-    schema_version: number;
-    contract_revision: string;
-    api: {
-        build_date_present: boolean;
-        git_sha_present: boolean;
-        minimum_hotm_enterprise_client: string;
-        name: string;
-        version: string;
-    };
-    deployment: {
-        edition: string;
-        hosted_multi_tenant_ready: boolean;
-        mode: string;
-    };
-    auth: {
-        mode: string;
-        oauth_issuer_configured: boolean;
-        required: boolean;
-        tenant_context_available: boolean;
-    };
-    capabilities: Record<string, FortemiCompatibilityCapability>;
-    links: {
-        asyncapi: string;
-        health: string;
-        openapi: string;
-        streaming_health: string;
-    };
+/**
+ * Pick the backend that best satisfies `request` from `available`. Prefers a
+ * fully-satisfying backend with the lightest startup cost; if none fully
+ * satisfy, returns the one missing the fewest capabilities (lightest on ties) so
+ * the caller can degrade with eyes open via `selection.missing`.
+ */
+declare function selectBackend(request: BackendRequest, available: DataBackend[]): BackendSelection;
+interface PGliteBackendOptions {
+    id?: string;
+    /** Whether embeddings exist so search can use the semantic path. */
+    semanticAvailable?: boolean;
+    /** Host-owned query embedding, required to expose semantic/hybrid operations. */
+    embedQuery?: (query: string) => Promise<number[]>;
 }
-interface FortemiCompatibilityValidationResult {
-    ok: boolean;
-    errors: string[];
-    warnings: string[];
-    response?: FortemiCompatibilityResponse;
+/**
+ * Wrap a PGlite-backed `DatabaseClient` as a `DataBackend`. Read ops delegate to
+ * the repositories; writes go through the `manageNote` tool. Advertises full
+ * read+write+merge with `ann-full` only when vector storage and a query embedder
+ * are configured. Typed predicates refer to the local unpublished candidate.
+ */
+declare function createPGliteBackend(db: DatabaseClient, options?: PGliteBackendOptions): DataBackend;
+interface RemoteBackendPaths {
+    notes: string;
+    note: string;
+    search: string;
+    resolveEvidence?: string;
+    links: string;
+    concepts: string;
+    provenance: string;
+    restore: string;
+    /** @deprecated Tool-intent path overrides cannot adapt the REST contract and are rejected. */
+    manageNote?: string;
+    /** @deprecated Semantic search uses the search path and mode parameter. Overrides are rejected. */
+    semantic?: string;
 }
-interface FetchFortemiCompatibilityOptions {
-    baseUrl?: string;
+interface RemoteSearchOptions extends BackendSearchQueryOptions {
+    mode?: RemoteSearchMode;
+}
+interface RemoteSearchResult extends BackendSearchResult {
+    /** The server total counts returned hits, not the corpus or a pagination estimate. */
+    totalKind: 'returned-hits';
+    requestedMode: RemoteSearchMode;
+    effectiveMode: RemoteSearchMode;
+    degraded: boolean;
+    degradation?: RemoteSearchDegradation;
+}
+interface RemoteManageNoteResult {
+    action: 'archive' | 'create' | 'delete' | 'restore' | 'star' | 'unarchive' | 'unstar' | 'update';
+    note_id: string;
+    /** Present only when the mutation itself returns a note envelope. */
+    note?: BackendNoteFull;
+}
+interface RemoteDataBackend extends DataBackend {
+    /** Candidate current-storage resolution; not a complete evidence capability advertisement. */
+    resolveEvidence(locator: unknown, options?: RemoteEvidenceResolutionOptions): Promise<string>;
+    search(query: string, options?: RemoteSearchOptions): Promise<RemoteSearchResult>;
+    semanticWithReport(query: string, k?: number): Promise<RemoteSearchResult>;
+    manageNote(input: unknown): Promise<RemoteManageNoteResult>;
+}
+interface RemoteBackendConfig {
+    baseUrl: string;
+    id?: string;
     fetchImpl?: typeof fetch;
-    timeoutMs?: number;
+    headers?: (() => HeadersInit | Promise<HeadersInit>) | HeadersInit;
+    authToken?: string;
+    paths?: Partial<RemoteBackendPaths>;
 }
-declare function fortemiCompatibilityUrl(baseUrl?: string): string;
-declare function validateFortemiCompatibilityResponse(raw: unknown): FortemiCompatibilityValidationResult;
-declare function formatFortemiCompatibilitySummary(response: FortemiCompatibilityResponse): string;
-declare function fetchAndValidateFortemiCompatibility(options?: FetchFortemiCompatibilityOptions): Promise<FortemiCompatibilityValidationResult & {
-    status?: number;
-    url: string;
+declare function createRemoteBackend(config: RemoteBackendConfig): RemoteDataBackend;
+interface ShardBackendOptions {
+    id?: string;
+    /** Declared semantic tier this shard provides (default `none`). Set to `cosine-small` when the reader has a vector provider. */
+    semantic?: BackendSemanticTier;
+}
+/**
+ * Wrap a `ShardReader` (#189) as a read-only `DataBackend`. Startup is instant
+ * (no index build) and the semantic tier is whatever the reader's provider
+ * offers — `none` for text/facets-only shards, `cosine-small` when a vector
+ * provider is attached.
+ */
+declare function createShardBackend(reader: ShardReader, options?: ShardBackendOptions): DataBackend;
+declare const provenanceGraph: z.ZodObject<{
+    all_activities: z.ZodArray<z.ZodObject<{
+        activity_type: z.ZodString;
+        ended_at: z.ZodNullable<z.ZodString>;
+        id: z.ZodEffects<z.ZodString, string, string>;
+        metadata: z.ZodEffects<z.ZodUnknown, {} | null, unknown>;
+        model_name: z.ZodNullable<z.ZodString>;
+        note_id: z.ZodEffects<z.ZodString, string, string>;
+        revision_id: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
+        started_at: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        activity_type: string;
+        ended_at: null | string;
+        id: string;
+        metadata: {} | null;
+        model_name: null | string;
+        note_id: string;
+        revision_id: null | string;
+        started_at: string;
+    }, {
+        activity_type: string;
+        ended_at: null | string;
+        id: string;
+        metadata?: unknown;
+        model_name: null | string;
+        note_id: string;
+        revision_id: null | string;
+        started_at: string;
+    }>, "many">;
+    all_edges: z.ZodArray<z.ZodObject<{
+        created_at_utc: z.ZodString;
+        id: z.ZodEffects<z.ZodString, string, string>;
+        relation: z.ZodString;
+        revision_id: z.ZodEffects<z.ZodString, string, string>;
+        source_note_id: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
+        source_url: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        created_at_utc: string;
+        id: string;
+        relation: string;
+        revision_id: string;
+        source_note_id: null | string;
+        source_url: null | string;
+    }, {
+        created_at_utc: string;
+        id: string;
+        relation: string;
+        revision_id: string;
+        source_note_id: null | string;
+        source_url: null | string;
+    }>, "many">;
+    current_chain: z.ZodNullable<z.ZodObject<{
+        activity: z.ZodNullable<z.ZodObject<{
+            activity_type: z.ZodString;
+            ended_at: z.ZodNullable<z.ZodString>;
+            id: z.ZodEffects<z.ZodString, string, string>;
+            metadata: z.ZodEffects<z.ZodUnknown, {} | null, unknown>;
+            model_name: z.ZodNullable<z.ZodString>;
+            note_id: z.ZodEffects<z.ZodString, string, string>;
+            revision_id: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
+            started_at: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            activity_type: string;
+            ended_at: null | string;
+            id: string;
+            metadata: {} | null;
+            model_name: null | string;
+            note_id: string;
+            revision_id: null | string;
+            started_at: string;
+        }, {
+            activity_type: string;
+            ended_at: null | string;
+            id: string;
+            metadata?: unknown;
+            model_name: null | string;
+            note_id: string;
+            revision_id: null | string;
+            started_at: string;
+        }>>;
+        edges: z.ZodArray<z.ZodObject<{
+            created_at_utc: z.ZodString;
+            id: z.ZodEffects<z.ZodString, string, string>;
+            relation: z.ZodString;
+            revision_id: z.ZodEffects<z.ZodString, string, string>;
+            source_note_id: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
+            source_url: z.ZodNullable<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            created_at_utc: string;
+            id: string;
+            relation: string;
+            revision_id: string;
+            source_note_id: null | string;
+            source_url: null | string;
+        }, {
+            created_at_utc: string;
+            id: string;
+            relation: string;
+            revision_id: string;
+            source_note_id: null | string;
+            source_url: null | string;
+        }>, "many">;
+        note_id: z.ZodEffects<z.ZodString, string, string>;
+        revision_id: z.ZodEffects<z.ZodString, string, string>;
+    }, "strip", z.ZodTypeAny, {
+        activity: {
+            activity_type: string;
+            ended_at: null | string;
+            id: string;
+            metadata: {} | null;
+            model_name: null | string;
+            note_id: string;
+            revision_id: null | string;
+            started_at: string;
+        } | null;
+        edges: {
+            created_at_utc: string;
+            id: string;
+            relation: string;
+            revision_id: string;
+            source_note_id: null | string;
+            source_url: null | string;
+        }[];
+        note_id: string;
+        revision_id: string;
+    }, {
+        activity: {
+            activity_type: string;
+            ended_at: null | string;
+            id: string;
+            metadata?: unknown;
+            model_name: null | string;
+            note_id: string;
+            revision_id: null | string;
+            started_at: string;
+        } | null;
+        edges: {
+            created_at_utc: string;
+            id: string;
+            relation: string;
+            revision_id: string;
+            source_note_id: null | string;
+            source_url: null | string;
+        }[];
+        note_id: string;
+        revision_id: string;
+    }>>;
+    derived_count: z.ZodNumber;
+    derived_notes: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    note_id: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    all_activities: {
+        activity_type: string;
+        ended_at: null | string;
+        id: string;
+        metadata: {} | null;
+        model_name: null | string;
+        note_id: string;
+        revision_id: null | string;
+        started_at: string;
+    }[];
+    all_edges: {
+        created_at_utc: string;
+        id: string;
+        relation: string;
+        revision_id: string;
+        source_note_id: null | string;
+        source_url: null | string;
+    }[];
+    current_chain: {
+        activity: {
+            activity_type: string;
+            ended_at: null | string;
+            id: string;
+            metadata: {} | null;
+            model_name: null | string;
+            note_id: string;
+            revision_id: null | string;
+            started_at: string;
+        } | null;
+        edges: {
+            created_at_utc: string;
+            id: string;
+            relation: string;
+            revision_id: string;
+            source_note_id: null | string;
+            source_url: null | string;
+        }[];
+        note_id: string;
+        revision_id: string;
+    } | null;
+    derived_count: number;
+    derived_notes: string[];
+    note_id: string;
+}, {
+    all_activities: {
+        activity_type: string;
+        ended_at: null | string;
+        id: string;
+        metadata?: unknown;
+        model_name: null | string;
+        note_id: string;
+        revision_id: null | string;
+        started_at: string;
+    }[];
+    all_edges: {
+        created_at_utc: string;
+        id: string;
+        relation: string;
+        revision_id: string;
+        source_note_id: null | string;
+        source_url: null | string;
+    }[];
+    current_chain: {
+        activity: {
+            activity_type: string;
+            ended_at: null | string;
+            id: string;
+            metadata?: unknown;
+            model_name: null | string;
+            note_id: string;
+            revision_id: null | string;
+            started_at: string;
+        } | null;
+        edges: {
+            created_at_utc: string;
+            id: string;
+            relation: string;
+            revision_id: string;
+            source_note_id: null | string;
+            source_url: null | string;
+        }[];
+        note_id: string;
+        revision_id: string;
+    } | null;
+    derived_count: number;
+    derived_notes: string[];
+    note_id: string;
 }>;
-interface SWRegistrationResult {
-    registered: boolean;
-    registration?: ServiceWorkerRegistration;
-    error?: string;
-}
-declare function registerServiceWorker(swUrl?: string): Promise<SWRegistrationResult>;
-/**
- * REST route definitions for Service Worker.
- * These are pure functions that transform HTTP Request → tool input and tool output → Response.
- * The actual DB connection is injected at registration time.
- *
- * All routes currently return 503 Not Implemented — the DB wiring happens in a later issue.
- * The URL structure and request/response shapes are the valuable contract defined here.
- */
-interface RouteHandler {
-    method: string;
-    pattern: RegExp;
-    handler: (request: Request, match: RegExpMatchArray, params: URLSearchParams) => Promise<Response>;
-}
-/**
- * Create route handlers.
- * db parameter will be injected when the SW gets access to PGlite.
- * For now, returns 503 Not Implemented for all routes.
- */
-declare function createRoutes(): RouteHandler[];
-/**
- * Match a request against the registered routes and return the first matching
- * handler, or null if no route matches.
- */
-declare function matchRoute(routes: RouteHandler[], request: Request, url: URL): null | RouteHandler;
-/**
- * One-shot migration of the pre-bytecask blob layout into the new store.
- *
- * The legacy layout (shipped through v2026.7.x) was:
- *   - IndexedDB: database `fortemi-<archive>-blobs`, object store `blobs`,
- *     values keyed by the full checksum string (`blake3:<hex>`, historically
- *     also `sha256:<hex>`).
- *   - OPFS: directory `fortemi-<archive>-blobs/<h0h1>/<h2h3>/<checksum>`.
- *
- * Migration re-`put()`s every payload — the new store recomputes BLAKE3, so
- * legacy `sha256:`-keyed entries converge to canonical keys for free
- * (ADR-012 D3). The legacy source is deleted only after every entry migrated
- * without error; any failure leaves it untouched for the next attempt.
- */
-/** Outcome of one migration attempt (for diagnostics/logging). */
-interface LegacyMigrationReport {
-    migrated: number;
-    /** Migration aborted without deleting the legacy source. */
-    failed: boolean;
-}
-/**
- * Migrate any legacy blob layout for `archiveName` into `target`, then delete
- * the legacy source. Failures are contained: the legacy data stays in place
- * and the new store keeps whatever was already re-put (idempotent on retry).
- */
-declare function migrateLegacyBlobStore(archiveName: string, target: BlobStore, indexedDbFactory?: IDBFactory): Promise<LegacyMigrationReport>;
+/** Producer field names intentionally distinguish this graph from local PGlite PROV edges. */
+type RemoteProvenanceGraph = z.infer<typeof provenanceGraph>;
+declare const searchMode: z.ZodEnum<[
+    "fts",
+    "semantic",
+    "hybrid"
+]>;
+type RemoteSearchMode = z.infer<typeof searchMode>;
+declare const searchHit: z.ZodEffects<z.ZodObject<{
+    chain_info: z.ZodOptional<z.ZodObject<{
+        best_chunk_sequence: z.ZodNumber;
+        chain_id: z.ZodEffects<z.ZodString, string, string>;
+        chunks_matched: z.ZodNumber;
+        original_title: z.ZodString;
+        total_chunks: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        best_chunk_sequence: number;
+        chain_id: string;
+        chunks_matched: number;
+        original_title: string;
+        total_chunks: number;
+    }, {
+        best_chunk_sequence: number;
+        chain_id: string;
+        chunks_matched: number;
+        original_title: string;
+        total_chunks: number;
+    }>>;
+    embedding_status: z.ZodOptional<z.ZodEnum<[
+        "ready",
+        "pending",
+        "failed",
+        "none"
+    ]>>;
+    evidence: z.ZodOptional<z.ZodUnknown>;
+    note_id: z.ZodEffects<z.ZodString, string, string>;
+    score: z.ZodNumber;
+    snippet: z.ZodNullable<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    title: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    chain_info?: {
+        best_chunk_sequence: number;
+        chain_id: string;
+        chunks_matched: number;
+        original_title: string;
+        total_chunks: number;
+    } | undefined;
+    embedding_status?: "failed" | "none" | "pending" | "ready" | undefined;
+    evidence?: unknown;
+    note_id: string;
+    score: number;
+    snippet: null | string;
+    tags?: string[] | undefined;
+    title?: string | undefined;
+}, {
+    chain_info?: {
+        best_chunk_sequence: number;
+        chain_id: string;
+        chunks_matched: number;
+        original_title: string;
+        total_chunks: number;
+    } | undefined;
+    embedding_status?: "failed" | "none" | "pending" | "ready" | undefined;
+    evidence?: unknown;
+    note_id: string;
+    score: number;
+    snippet: null | string;
+    tags?: string[] | undefined;
+    title?: string | undefined;
+}>, {
+    chain_info?: {
+        best_chunk_sequence: number;
+        chain_id: string;
+        chunks_matched: number;
+        original_title: string;
+        total_chunks: number;
+    } | undefined;
+    embedding_status?: "failed" | "none" | "pending" | "ready" | undefined;
+    evidence?: SearchEvidenceSet | undefined;
+    note_id: string;
+    score: number;
+    snippet: null | string;
+    tags?: string[] | undefined;
+    title?: string | undefined;
+}, {
+    chain_info?: {
+        best_chunk_sequence: number;
+        chain_id: string;
+        chunks_matched: number;
+        original_title: string;
+        total_chunks: number;
+    } | undefined;
+    embedding_status?: "failed" | "none" | "pending" | "ready" | undefined;
+    evidence?: unknown;
+    note_id: string;
+    score: number;
+    snippet: null | string;
+    tags?: string[] | undefined;
+    title?: string | undefined;
+}>;
+declare const searchDegradation: z.ZodObject<{
+    code: z.ZodString;
+    effective_mode: z.ZodLiteral<"fts">;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+    effective_mode: "fts";
+}, {
+    code: string;
+    effective_mode: "fts";
+}>;
+type RemoteSearchDegradation = z.infer<typeof searchDegradation>;
+type RemoteSearchMetadata = Pick<z.infer<typeof searchHit>, 'chain_info' | 'embedding_status' | 'tags' | 'title'>;
+declare const manageInput: z.ZodUnion<[
+    z.ZodObject<{
+        action: z.ZodLiteral<"create">;
+        content: z.ZodString;
+        source: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        action: "create";
+        content: string;
+        source?: string | undefined;
+        tags?: string[] | undefined;
+        title?: null | string | undefined;
+    }, {
+        action: "create";
+        content: string;
+        source?: string | undefined;
+        tags?: string[] | undefined;
+        title?: null | string | undefined;
+    }>,
+    z.ZodEffects<z.ZodObject<{
+        action: z.ZodLiteral<"update">;
+        content: z.ZodOptional<z.ZodString>;
+        note_id: z.ZodEffects<z.ZodString, string, string>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        action: "update";
+        content?: string | undefined;
+        note_id: string;
+        tags?: string[] | undefined;
+    }, {
+        action: "update";
+        content?: string | undefined;
+        note_id: string;
+        tags?: string[] | undefined;
+    }>, {
+        action: "update";
+        content?: string | undefined;
+        note_id: string;
+        tags?: string[] | undefined;
+    }, {
+        action: "update";
+        content?: string | undefined;
+        note_id: string;
+        tags?: string[] | undefined;
+    }>,
+    z.ZodObject<{
+        action: z.ZodEnum<[
+            "delete",
+            "restore",
+            "archive",
+            "unarchive",
+            "star",
+            "unstar"
+        ]>;
+        note_id: z.ZodEffects<z.ZodString, string, string>;
+    }, "strict", z.ZodTypeAny, {
+        action: "archive" | "delete" | "restore" | "star" | "unarchive" | "unstar";
+        note_id: string;
+    }, {
+        action: "archive" | "delete" | "restore" | "star" | "unarchive" | "unstar";
+        note_id: string;
+    }>
+]>;
+type RemoteManageNoteInput = z.infer<typeof manageInput>;
 /**
- * Shared postMessage protocol types for the PGlite worker.
- *
- * WorkerRequest — messages sent from the client to the worker.
- * WorkerResponse — messages sent from the worker back to the client.
+ * Capability module system (ADR-002).
+ * Tracks opt-in WASM module states. No WASM loaded by default (CAP-001).
  *
- * Every request carries a unique `id` that the worker echoes in its response,
- * allowing the client to correlate replies with pending promises.
- * The READY broadcast is the only message without an `id` — it is sent once
- * on startup before any requests are processed.
+ * State machine (valid transitions):
+ *   unloaded  -> loading  (via enable)
+ *   loading   -> ready    (via markReady or successful loader)
+ *   loading   -> error    (via markError or failed loader)
+ *   ready     -> disabled (via disable)
+ *   disabled  -> loading  (via enable, re-enable)
+ *   error     -> loading  (via enable, retry)
  */
-/** Messages from client to worker */
-type WorkerRequest = {
-    id: string;
-    isolationLevel?: string;
-    type: 'BEGIN';
-} | {
-    id: string;
-    params?: unknown[];
-    sql: string;
-    txId: string;
-    type: 'TX_QUERY';
-} | {
-    id: string;
-    params?: unknown[];
-    sql: string;
-    type: 'QUERY';
-} | {
-    id: string;
-    sql: string;
-    txId: string;
-    type: 'TX_EXEC';
-} | {
-    id: string;
-    sql: string;
-    type: 'EXEC';
-} | {
-    id: string;
-    txId: string;
-    type: 'COMMIT';
-} | {
-    id: string;
-    txId: string;
-    type: 'ROLLBACK';
-} | {
-    id: string;
-    type: 'CLOSE';
-} | {
-    id: string;
-    type: 'PING';
-};
-/** Messages from worker to client */
-type WorkerResponse = {
-    affectedRows?: number;
-    id: string;
-    type: 'EXEC_DONE';
-} | {
-    error: string;
-    id: string;
-    type: 'ERROR';
-} | {
-    fields?: Array<{
-        dataTypeID: number;
-        name: string;
-    }>;
-    id: string;
-    rows: unknown[];
-    type: 'RESULT';
-} | {
-    id: string;
-    txId: string;
-    type: 'TX_STARTED';
-} | {
-    id: string;
-    type: 'PONG';
-} | {
-    id: string;
-    type: 'TX_DONE';
-} | {
-    type: 'READY';
-};
-type JsonObject = Record<string, unknown>;
-interface NativeEmbeddingConfig {
-    id: string;
-    name: string;
-    description: null | string;
-    model: string;
-    dimension: number;
-    chunk_size: number;
-    chunk_overlap: number;
-    hnsw_m: null | number;
-    hnsw_ef_construction: null | number;
-    ivfflat_lists: null | number;
-    is_default: boolean | null;
-    supports_mrl: boolean | null;
-    matryoshka_dims: null | number[];
-    default_truncate_dim: null | number;
-    provider: null | string;
-    provider_config: JsonObject | null;
-    content_types: null | string[];
-    strengths: null | string[];
-    limitations: null | string[];
-    recommended_for: null | string[];
-    benchmark_scores: JsonObject | null;
-    is_available: boolean | null;
-    document_composition: JsonObject;
-    created_at: string;
-    updated_at: string;
-}
-interface NativeEmbeddingSet {
-    id: string;
-    name: string;
-    slug: null | string;
-    description: null | string;
-    purpose: null | string;
-    usage_hints: null | string;
-    keywords: null | string[];
-    set_type: 'filter' | 'full';
-    mode: 'auto' | 'manual' | 'mixed' | null;
-    criteria: JsonObject | null;
-    embedding_config_id: null | string;
-    truncate_dim: null | number;
-    auto_embed_rules: JsonObject | null;
-    index_status: string;
-    index_type: null | string;
-    last_indexed_at: null | string;
-    document_count: null | number;
-    embedding_count: null | number;
-    embeddings_current: boolean | null;
-    index_size_bytes: null | number;
-    is_system: boolean | null;
-    is_active: boolean | null;
-    auto_refresh: boolean | null;
-    refresh_interval: null | string;
-    last_refresh_at: null | string;
-    agent_metadata: JsonObject | null;
-    created_at: string;
-    updated_at: string;
-    created_by: null | string;
+type CapabilityState = 'disabled' | 'error' | 'loading' | 'ready' | 'unloaded';
+type CapabilityName = 'audio' | 'llm' | 'pdf' | 'semantic' | 'vision';
+declare class CapabilityManager {
+    private events;
+    private capabilities;
+    private loaders;
+    private progressMessages;
+    constructor(events: TypedEventBus);
+    /**
+     * Register an async loader for a capability.
+     * Called by enable(); if no loader is registered the capability transitions
+     * directly to ready (useful for capabilities that require no async init).
+     */
+    registerLoader(name: CapabilityName, loader: () => Promise<void>): void;
+    getState(name: CapabilityName): CapabilityState;
+    isReady(name: CapabilityName): boolean;
+    /**
+     * Enable a capability.
+     * Valid from: unloaded, disabled, error (retry).
+     * Runs the registered loader if present; transitions to ready on success,
+     * error on failure.
+     */
+    enable(name: CapabilityName): Promise<void>;
+    /**
+     * Disable a ready capability.
+     * Valid from: ready only.
+     */
+    disable(name: CapabilityName): void;
+    /**
+     * Mark a loading capability as ready (external use, e.g. bridge protocol).
+     * Valid from: loading only.
+     */
+    markReady(name: CapabilityName): void;
+    /**
+     * Mark a loading capability as errored (external use, e.g. bridge protocol).
+     * Valid from: loading only.
+     */
+    markError(name: CapabilityName, error: string): void;
+    /**
+     * Report loading progress (0-100).
+     * Emits capability.loading with progress if the capability is currently loading.
+     * No-op if the capability is not in loading state.
+     */
+    reportProgress(name: CapabilityName, progress: number): void;
+    /** Set a human-readable progress message for a loading capability */
+    setProgress(name: CapabilityName, message: string): void;
+    /** Get the current progress message for a capability */
+    getProgress(name: CapabilityName): string | undefined;
+    getError(name: CapabilityName): string | undefined;
+    listAll(): Array<{
+        name: CapabilityName;
+        state: CapabilityState;
+    }>;
 }
-interface NativeEmbeddingMember {
-    embedding_set_id: string;
-    note_id: string;
-    membership_type: null | string;
-    added_at: null | string;
-    added_by: null | string;
+/**
+ * Sequential SQL migration runner for DatabaseClient.
+ * Tracks applied migrations in a schema_version table.
+ * Each migration runs in a transaction; version updated atomically.
+ */
+interface Migration {
+    version: number;
+    name: string;
+    sql: string;
+}
+declare class MigrationRunner {
+    private db;
+    private events?;
+    constructor(db: DatabaseClient, events?: TypedEventBus | undefined);
+    ensureSchemaTable(): Promise<void>;
+    getCurrentVersion(): Promise<number>;
+    apply(migrations: Migration[]): Promise<number>;
+    getAppliedMigrations(): Promise<Array<{
+        name: string;
+        version: number;
+    }>>;
 }
+declare const allMigrations: Migration[];
 /**
- * EmbeddingSetsRepository - named, filter, and virtual embedding set API.
+ * Multi-archive manager for Fortemi.
+ * Each archive is a separate PGlite instance with its own persistence path.
+ * Migrations are applied automatically on open.
  */
-type EmbeddingSetKind = 'filter' | 'physical' | 'virtual';
-type EmbeddingSetMode = 'auto' | 'manual' | 'mixed';
-interface EmbeddingSetCriteria {
-    query?: string;
-    tags?: string[];
-    collectionIds?: string[];
-    conceptIds?: string[];
-    noteIds?: string[];
-    sources?: string[];
-    formats?: string[];
-    visibilities?: string[];
-    isStarred?: boolean;
-    isArchived?: boolean;
-    hasTitle?: boolean;
-    hasEmbedding?: boolean;
-    isUserEdited?: boolean;
-    hasAiMetadata?: boolean;
-    hasRevisions?: boolean;
-    minGenerationCount?: number;
-    maxGenerationCount?: number;
-    updatedAfter?: string;
-    updatedBefore?: string;
+interface ArchiveInfo {
+    name: string;
+    createdAt: string;
 }
-interface EmbeddingSetFreshness {
-    status: 'fresh' | 'stale' | 'unknown';
-    sourceHash?: string;
-    checkedAt?: string;
-    reason?: string;
+declare class ArchiveManager {
+    private events?;
+    private currentArchive;
+    private db;
+    private archives;
+    private persistence;
+    private backendFactory;
+    /**
+     * Persistence is a PLUGGABLE, opt-in backend (issue #261). Pass a
+     * `StorageBackendFactory` to run against any `StorageBackend`
+     * implementation; PGlite is merely the built-in default, selected only when
+     * the convenience `PersistenceMode` string form is used. Because
+     * `defaultStorageBackendFactory` reaches PGlite through the lazily-imported
+     * `createPGliteInstance` (see `db.ts`), a consumer that supplies its own
+     * factory — or never opens an archive at all — never pulls the PGlite WASM
+     * engine into its bundle.
+     *
+     * @param persistenceOrFactory `PersistenceMode` string (uses the built-in
+     *   PGlite backend) OR a custom `StorageBackendFactory`.
+     * @param persistenceOverride persistence hint passed to a custom factory.
+     */
+    constructor(persistenceOrFactory: PersistenceMode | StorageBackendFactory, events?: TypedEventBus | undefined, persistenceOverride?: PersistenceMode);
+    getCurrentArchiveName(): string;
+    getDb(): null | StorageBackend;
+    open(archiveName?: string): Promise<StorageBackend>;
+    /**
+     * Adopt an already-created backend WITHOUT running migrations — for a backend
+     * whose schema is already present, e.g. a PGlite restored from a physical
+     * data-dir snapshot (issue #187, `restoreDbSnapshot`). Running migrations here
+     * would be wrong: the restored dir already carries them (and the HNSW index).
+     */
+    adopt(backend: StorageBackend, archiveName?: string): Promise<StorageBackend>;
+    create(archiveName: string): Promise<StorageBackend>;
+    switchTo(archiveName: string): Promise<StorageBackend>;
+    delete(archiveName: string): Promise<void>;
+    listArchives(): ArchiveInfo[];
+    close(): Promise<void>;
 }
-interface EmbeddingCompatibilityPolicy {
-    model: 'allow-compatible-family' | 'require-same';
-    dimension: 'allow-truncation' | 'require-same';
-    duplicateVectors: 'error' | 'prefer-latest' | 'prefer-set-order';
-    missingVectors: 'error' | 'include-unembedded-note' | 'omit';
+/**
+ * Factory function for creating a FortemiCore instance.
+ * All deployment modes use this entry point.
+ */
+interface FortemiConfig {
+    persistence: 'idb' | 'memory' | 'opfs';
+    archiveName?: string;
 }
-interface VirtualMaterializationPolicy {
-    allowed: boolean;
-    includeResolvedMembers?: boolean;
-    includeResolvedEdges?: boolean;
-    freshness: 'fresh' | 'stale' | 'unknown';
-    inputHash?: string;
-    generatedAt?: string;
-    resolvedMemberCount?: number;
+interface FortemiCore {
+    events: TypedEventBus;
+    config: FortemiConfig;
+    destroy(): void;
 }
-interface CriteriaVirtualSource {
-    type: 'criteria';
-    baseSetId: string;
-    criteria: EmbeddingSetCriteria;
+declare function createFortemi(config: FortemiConfig): FortemiCore;
+/**
+ * Compute a browser-local content-identity hash (SHA-256), encoded as
+ * `sha256:<64-char lowercase hex>`.
+ *
+ * This is an internal identity/dedup digest used for note content, embedding
+ * configs, the AIWG index, and graph identity — NOT the server's attachment
+ * content-hash convention. Binary-attachment blobs use {@link computeBlobHash}
+ * (BLAKE3), which is the canonical checksum defined by the binary-attachment
+ * projection contract (`checksum: "blake3:<hex>"`). Keeping these two functions
+ * separate preserves JSON format parity for the identity hashes above while
+ * letting attachments match the server's `compute_content_hash`.
+ *
+ * @param data - Raw bytes to hash
+ * @returns `'sha256:<64-char lowercase hex>'`
+ */
+declare function computeHash(data: Uint8Array): string;
+/**
+ * Compute the canonical attachment content hash: **BLAKE3**, encoded as
+ * `blake3:<64-char lowercase hex>`.
+ *
+ * Matches the fortemi server (`crates/matric-db/src/file_storage.rs`
+ * `compute_content_hash`) and the portable Knowledge-Shard byte-sidecar
+ * contract, where the sidecar tar entry name is the bare hex (the `blake3:`
+ * prefix stripped). SubtleCrypto has no BLAKE3, so this uses `@noble/hashes`.
+ *
+ * @param data - Raw attachment bytes to hash
+ * @returns `'blake3:<64-char lowercase hex>'`
+ */
+declare function computeBlobHash(data: Uint8Array): string;
+declare const FORTEMI_COMPATIBILITY_PATH = "/api/v1/system/compatibility";
+declare const FORTEMI_SERVER_COMPATIBILITY_REVISION = "2026-07-06";
+declare const FORTEMI_COMPATIBILITY_STATES: readonly [
+    "available",
+    "degraded",
+    "preview",
+    "unavailable",
+    "unknown"
+];
+type FortemiCompatibilityState = (typeof FORTEMI_COMPATIBILITY_STATES)[number];
+declare const FORTEMI_REQUIRED_COMPATIBILITY_CAPABILITIES: readonly [
+    "core_notes",
+    "search",
+    "jobs",
+    "realtime_activity",
+    "hosted_auth",
+    "premium_components",
+    "backoffice_api",
+    "audit_posture",
+    "quota_status",
+    "kms_status",
+    "mcp_scope_gate"
+];
+type FortemiRequiredCompatibilityCapability = (typeof FORTEMI_REQUIRED_COMPATIBILITY_CAPABILITIES)[number];
+interface FortemiCompatibilityCapability {
+    state: FortemiCompatibilityState;
+    reason_code?: string;
 }
-interface SetOperationVirtualSource {
-    type: 'set-operation';
-    operation: 'difference' | 'intersection' | 'union';
-    setIds: string[];
+interface FortemiCompatibilityResponse {
+    schema_version: number;
+    contract_revision: string;
+    api: {
+        build_date_present: boolean;
+        git_sha_present: boolean;
+        minimum_hotm_enterprise_client: string;
+        name: string;
+        version: string;
+    };
+    deployment: {
+        edition: string;
+        hosted_multi_tenant_ready: boolean;
+        mode: string;
+    };
+    auth: {
+        mode: string;
+        oauth_issuer_configured: boolean;
+        required: boolean;
+        tenant_context_available: boolean;
+    };
+    capabilities: Record<string, FortemiCompatibilityCapability>;
+    links: {
+        asyncapi: string;
+        health: string;
+        openapi: string;
+        streaming_health: string;
+    };
 }
-interface FallbackVirtualSource {
-    type: 'fallback';
-    preferredSetIds: string[];
+interface FortemiCompatibilityValidationResult {
+    ok: boolean;
+    errors: string[];
+    warnings: string[];
+    response?: FortemiCompatibilityResponse;
 }
-interface LatestCompatibleVirtualSource {
-    type: 'latest-compatible';
-    candidateSetIds: string[];
-    model?: string;
-    dimension?: number;
+interface FetchFortemiCompatibilityOptions {
+    baseUrl?: string;
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
 }
-interface SnapshotVirtualSource {
-    type: 'snapshot';
-    snapshotId: string;
-    sourceDefinitionId: string;
-    generatedAt: string;
-    inputHash: string;
+declare function fortemiCompatibilityUrl(baseUrl?: string): string;
+declare function validateFortemiCompatibilityResponse(raw: unknown): FortemiCompatibilityValidationResult;
+declare function formatFortemiCompatibilitySummary(response: FortemiCompatibilityResponse): string;
+declare function fetchAndValidateFortemiCompatibility(options?: FetchFortemiCompatibilityOptions): Promise<FortemiCompatibilityValidationResult & {
+    status?: number;
+    url: string;
+}>;
+interface SWRegistrationResult {
+    registered: boolean;
+    registration?: ServiceWorkerRegistration;
+    error?: string;
 }
-type VirtualEmbeddingSetSource = CriteriaVirtualSource | FallbackVirtualSource | LatestCompatibleVirtualSource | SetOperationVirtualSource | SnapshotVirtualSource;
-interface VirtualEmbeddingSetDefinition {
-    id: string;
-    name: string;
-    purpose?: null | string;
-    source: VirtualEmbeddingSetSource;
-    compatibility: EmbeddingCompatibilityPolicy;
-    materialization?: VirtualMaterializationPolicy;
-    createdAt?: string;
-    updatedAt?: string;
+declare function registerServiceWorker(swUrl?: string): Promise<SWRegistrationResult>;
+/**
+ * REST route definitions for Service Worker.
+ * These are pure functions that transform HTTP Request → tool input and tool output → Response.
+ * The actual DB connection is injected at registration time.
+ *
+ * All routes currently return 503 Not Implemented — the DB wiring happens in a later issue.
+ * The URL structure and request/response shapes are the valuable contract defined here.
+ */
+interface RouteHandler {
+    method: string;
+    pattern: RegExp;
+    handler: (request: Request, match: RegExpMatchArray, params: URLSearchParams) => Promise<Response>;
 }
-interface EmbeddingSetSelector {
-    kind: 'default' | 'embedding-set' | 'virtual-definition';
-    embeddingSetId?: string;
-    definition?: VirtualEmbeddingSetDefinition;
+/**
+ * Create route handlers.
+ * db parameter will be injected when the SW gets access to PGlite.
+ * For now, returns 503 Not Implemented for all routes.
+ */
+declare function createRoutes(): RouteHandler[];
+/**
+ * Match a request against the registered routes and return the first matching
+ * handler, or null if no route matches.
+ */
+declare function matchRoute(routes: RouteHandler[], request: Request, url: URL): null | RouteHandler;
+/**
+ * One-shot migration of the pre-bytecask blob layout into the new store.
+ *
+ * The legacy layout (shipped through v2026.7.x) was:
+ *   - IndexedDB: database `fortemi-<archive>-blobs`, object store `blobs`,
+ *     values keyed by the full checksum string (`blake3:<hex>`, historically
+ *     also `sha256:<hex>`).
+ *   - OPFS: directory `fortemi-<archive>-blobs/<h0h1>/<h2h3>/<checksum>`.
+ *
+ * Migration re-`put()`s every payload — the new store recomputes BLAKE3, so
+ * legacy `sha256:`-keyed entries converge to canonical keys for free
+ * (ADR-012 D3). The legacy source is deleted only after every entry migrated
+ * without error; any failure leaves it untouched for the next attempt.
+ */
+/** Outcome of one migration attempt (for diagnostics/logging). */
+interface LegacyMigrationReport {
+    migrated: number;
+    /** Migration aborted without deleting the legacy source. */
+    failed: boolean;
 }
-interface EmbeddingSetDescriptor {
+/**
+ * Migrate any legacy blob layout for `archiveName` into `target`, then delete
+ * the legacy source. Failures are contained: the legacy data stays in place
+ * and the new store keeps whatever was already re-put (idempotent on retry).
+ */
+declare function migrateLegacyBlobStore(archiveName: string, target: BlobStore, indexedDbFactory?: IDBFactory): Promise<LegacyMigrationReport>;
+/**
+ * Shared postMessage protocol types for the PGlite worker.
+ *
+ * WorkerRequest — messages sent from the client to the worker.
+ * WorkerResponse — messages sent from the worker back to the client.
+ *
+ * Every request carries a unique `id` that the worker echoes in its response,
+ * allowing the client to correlate replies with pending promises.
+ * The READY broadcast is the only message without an `id` — it is sent once
+ * on startup before any requests are processed.
+ */
+/** Messages from client to worker */
+type WorkerRequest = {
     id: string;
-    name: string;
-    purpose?: null | string;
-    kind: EmbeddingSetKind;
-    mode?: EmbeddingSetMode;
-    model?: string;
-    dimension?: number;
-    truncateDimension?: null | number;
-    criteria?: EmbeddingSetCriteria | null;
-    createdAt?: string;
-    updatedAt?: string;
-    freshness?: EmbeddingSetFreshness;
-}
-type VirtualEmbeddingSetValidationError = {
-    code: 'duplicate-vector';
-    noteId: string;
-    setIds: string[];
-} | {
-    code: 'missing-vector';
-    noteId: string;
-    setId: string;
+    isolationLevel?: string;
+    type: 'BEGIN';
 } | {
-    code: 'mixed-dimensions';
-    setIds: string[];
+    id: string;
+    params?: unknown[];
+    sql: string;
+    txId: string;
+    type: 'TX_QUERY';
 } | {
-    code: 'mixed-models';
-    setIds: string[];
+    id: string;
+    params?: unknown[];
+    sql: string;
+    type: 'QUERY';
 } | {
-    code: 'stale-snapshot';
-    snapshotId: string;
+    id: string;
+    sql: string;
+    txId: string;
+    type: 'TX_EXEC';
 } | {
-    code: 'unsupported-criteria';
-    field: string;
-};
-interface ResolvedEmbeddingRow {
-    note_id: string;
-    embedding_set_id: string;
-    embedding_id: string;
-    vector: string;
-    created_at: Date | null;
-}
-interface ResolvedEmbeddingSet {
-    selector: EmbeddingSetSelector;
-    rows: ResolvedEmbeddingRow[];
-    noteIds: string[];
-    embeddingIds: string[];
-    errors: VirtualEmbeddingSetValidationError[];
-    freshness: EmbeddingSetFreshness;
-    resolutionSource: 'live' | 'materialized';
-}
-interface EmbeddingConfigRow extends Omit<NativeEmbeddingConfig, 'created_at' | 'updated_at'> {
-    created_at: Date;
-    updated_at: Date;
-}
-interface EmbeddingMemberRow extends Omit<NativeEmbeddingMember, 'added_at'> {
-    embedding_id: null | string;
-    added_at: Date | null;
-}
-interface EmbeddingRow {
     id: string;
-    note_id: null | string;
-    embedding_set_id: null | string;
-    chunk_index: number;
-    text: string;
-    vector: null | string;
-    model: null | string;
-    contract_fingerprint: null | string;
-    shard_contract_fingerprint_present: boolean;
-    created_at: Date | null;
-}
-interface EmbeddingSetRow extends Partial<Omit<NativeEmbeddingSet, 'created_at' | 'criteria' | 'keywords' | 'mode' | 'set_type' | 'truncate_dim' | 'updated_at'>> {
+    sql: string;
+    type: 'EXEC';
+} | {
     id: string;
-    name: string;
-    purpose: null | string;
-    model_name: string;
-    dimensions: number;
-    kind: EmbeddingSetKind;
-    mode: EmbeddingSetMode | null;
-    truncate_dimension: null | number;
-    criteria_json: null | unknown;
-    source_json: null | unknown;
-    compatibility_json: null | unknown;
-    materialization_json: null | unknown;
-    freshness_json: null | unknown;
-    created_at: Date;
-    updated_at: Date;
-}
-interface EmbeddingSetCreateInput {
-    id?: string;
-    name: string;
-    slug?: null | string;
-    purpose?: null | string;
-    model_name?: string;
-    dimensions?: number;
-    kind?: EmbeddingSetKind;
-    mode?: EmbeddingSetMode | null;
-    truncate_dimension?: null | number;
-    criteria?: EmbeddingSetCriteria | null;
-}
-interface EmbeddingSetEmbeddingInput {
-    id?: string;
-    note_id: string;
-    embedding_set_id: string;
-    vector: number[];
-}
-declare class EmbeddingSetsRepository {
-    private db;
-    constructor(db: QueryExecutor);
-    getConfig(id: string): Promise<EmbeddingConfigRow>;
-    listConfigs(): Promise<EmbeddingConfigRow[]>;
-    listMembers(setId: string): Promise<EmbeddingMemberRow[]>;
-    /** Includes metadata-only records and every chunk, unlike a resolved graph selector. */
-    listEmbeddings(setId: string): Promise<EmbeddingRow[]>;
-    create(input: EmbeddingSetCreateInput): Promise<EmbeddingSetRow>;
-    createVirtualDefinition(input: VirtualEmbeddingSetDefinition): Promise<EmbeddingSetRow>;
-    ensureDefault(): Promise<EmbeddingSetRow>;
-    get(id: string): Promise<EmbeddingSetRow>;
-    list(): Promise<EmbeddingSetRow[]>;
-    listDescriptors(): Promise<EmbeddingSetDescriptor[]>;
-    toDescriptor(row: EmbeddingSetRow): EmbeddingSetDescriptor;
-    putEmbedding(input: EmbeddingSetEmbeddingInput): Promise<{
-        id: string;
-    }>;
-    resolveSelector(selector: EmbeddingSetSelector): Promise<ResolvedEmbeddingSet>;
-    refreshMaterializedVirtualSet(setId: string): Promise<ResolvedEmbeddingSet>;
-    markVirtualSetStale(setId: string, reason: string): Promise<void>;
-    /** @internal The repository and mutation must use the same caller-owned transaction. */
-    withMaterializationInvalidation<T>(mutate: () => Promise<T>): Promise<T>;
-    private liveResolutionHash;
-    private resolveDefinition;
-    private resolvePhysicalSet;
-    private resolvePhysicalRows;
-    private resolveMaterializedRows;
-    private resolveCriteriaSource;
-    private resolveSetOperationSource;
-    private resolveFallbackSource;
-    private resolveLatestCompatibleSource;
-    private validateCompatibility;
-    private resolveDuplicateRows;
-    private finalizeResolution;
-    private resolutionInputHash;
-    private definitionFromRow;
-    private inferDefinitionModel;
-    private inferDefinitionDimension;
-}
-declare const REGISTERED_METADATA_PATHS: readonly [
-    "provider",
-    "model",
-    "role",
-    "event_kind",
-    "sensitivity",
-    "import_run_id"
-];
-type RegisteredMetadataPath = typeof REGISTERED_METADATA_PATHS[number];
-type MetadataPredicate = {
-    gte?: number | string;
-    lte?: number | string;
-    op: 'range';
-    path: RegisteredMetadataPath;
+    txId: string;
+    type: 'COMMIT';
 } | {
-    op: 'eq';
-    path: RegisteredMetadataPath;
-    value: boolean | null | number | string;
+    id: string;
+    txId: string;
+    type: 'ROLLBACK';
 } | {
-    op: 'exists';
-    path: RegisteredMetadataPath;
-    value?: boolean;
+    id: string;
+    type: 'CLOSE';
 } | {
-    op: 'in';
-    path: RegisteredMetadataPath;
-    value: readonly (boolean | null | number | string)[];
+    id: string;
+    type: 'PING';
 };
-interface EvidenceLocator {
-    note_id: string;
-    chunk?: {
-        index: number;
-        kind: 'attachment' | 'current' | 'title';
-    };
-    span?: {
-        end: number;
-        start: number;
-    };
-    source?: {
-        external_id_hash: string;
-        import_run_id: string;
-        namespace: string;
-        schema_version: string;
-    };
-    metadata_paths: RegisteredMetadataPath[];
-}
-interface MetadataPredicateConditionResult {
-    conditions: string[];
-    joins: string[];
-    params: unknown[];
-    nextIdx: number;
-}
-declare function buildMetadataPredicateConditions(options: Pick<SearchOptions, 'archive_id' | 'metadataPredicates' | 'tenant_id'>, startIdx: number): MetadataPredicateConditionResult;
-/**
- * Shared types for repository layer.
- * All repository methods use these types as inputs and outputs.
- */
-interface NoteSummary {
+/** Messages from worker to client */
+type WorkerResponse = {
+    affectedRows?: number;
     id: string;
-    title: null | string;
-    format: string;
-    source: string;
-    visibility: string;
-    is_starred: boolean;
-    is_pinned: boolean;
-    is_archived: boolean;
-    created_at: Date;
-    updated_at: Date;
-    deleted_at: Date | null;
-    tags: string[];
-}
-interface NoteFull extends NoteSummary {
-    /** Note metadata is independent of the current revision's AI metadata. */
-    metadata?: unknown;
-    archive_id: null | string;
-    revision_mode: string;
-    original: {
-        content_hash: string;
-        content: string;
-        created_at: Date;
-        id: null | string;
-        user_created_at?: null | string;
-        user_last_edited_at?: null | string;
-        version_number?: number;
-    };
-    current: {
-        ai_metadata: null | unknown;
-        content: string;
-        generation_count: number;
-        is_user_edited: boolean;
-        last_revision_id?: null | string;
-        model: null | string;
-        updated_at: Date;
-    };
-}
-interface NoteCreateInput {
-    metadata?: unknown;
-    content: string;
-    title?: string;
-    format?: string;
-    source?: string;
-    visibility?: string;
-    tags?: string[];
-    archive_id?: string;
-    /**
-     * Explicit primary key. When omitted a UUIDv7 is minted (the default). Supply
-     * this only for deterministic seeding or cross-instance identity — e.g. two
-     * in-browser databases that must agree on a shared note's id so a shard swap
-     * can dedupe it under the `skip` conflict strategy.
-     */
-    id?: string;
-}
-interface NoteUpdateInput {
-    metadata?: unknown;
-    title?: string;
-    content?: string;
-    format?: string;
-    visibility?: string;
-}
-interface NoteListOptions {
-    limit?: number;
-    offset?: number;
-    sort?: 'created_at' | 'title' | 'updated_at';
-    order?: 'asc' | 'desc';
-    is_starred?: boolean;
-    is_pinned?: boolean;
-    is_archived?: boolean;
-    include_deleted?: boolean;
-    include_archived?: boolean;
-    collection_id?: string;
-    tags?: string[];
-}
-interface PaginatedResult<T> {
-    items: T[];
-    total: number;
-    limit: number;
-    offset: number;
-}
-interface SearchResult {
+    type: 'EXEC_DONE';
+} | {
+    error: string;
     id: string;
-    title: null | string;
-    snippet: string;
-    rank: number;
-    created_at: Date;
-    updated_at: Date;
-    tags: string[];
-    has_embedding?: boolean;
-    locators?: EvidenceLocator[];
-}
-interface SearchFacets {
-    tags: {
-        count: number;
-        tag: string;
-    }[];
-    collections: {
-        count: number;
-        id: string;
+    type: 'ERROR';
+} | {
+    fields?: Array<{
+        dataTypeID: number;
         name: string;
-    }[];
-}
-interface SearchResponse {
-    results: SearchResult[];
-    total: number;
-    query: string;
-    mode: 'hybrid' | 'semantic' | 'text';
-    semantic_available: boolean;
-    limit: number;
-    offset: number;
-    facets?: SearchFacets;
-}
-interface SearchOptions {
-    limit?: number;
-    offset?: number;
-    tags?: string[];
-    collection_id?: string;
-    date_from?: Date;
-    date_to?: Date;
-    is_starred?: boolean;
-    is_archived?: boolean;
-    format?: string;
-    source?: string;
-    visibility?: string;
-    tenant_id?: string;
-    archive_id?: null | string;
-    metadataPredicates?: readonly MetadataPredicate[];
-    include_facets?: boolean;
-    mode?: 'auto' | 'hybrid' | 'semantic' | 'text';
-    embeddingSetId?: string;
-    embeddingSetSelector?: EmbeddingSetSelector;
-}
-interface NoteRevision {
+    }>;
     id: string;
-    note_id: string;
-    revision_number: number;
-    type: string;
-    content: string;
-    ai_metadata: null | unknown;
-    model: null | string;
-    created_at: Date;
-    parent_revision_id?: null | string;
-    summary?: null | string;
-    rationale?: null | string;
-    created_at_utc?: null | string;
-    ai_generated_at?: null | string;
-    user_last_edited_at?: null | string;
-    is_user_edited?: boolean;
-    generation_count?: number;
-}
-interface OriginalContentRevision {
+    rows: unknown[];
+    type: 'RESULT';
+} | {
     id: string;
-    note_id: string;
-    version_number: number;
-    content: string;
-    hash: string;
-    created_at_utc: string;
-    created_by: string;
-}
+    txId: string;
+    type: 'TX_STARTED';
+} | {
+    id: string;
+    type: 'PONG';
+} | {
+    id: string;
+    type: 'TX_DONE';
+} | {
+    type: 'READY';
+};
 /**
  * NotesRepository — CRUD and lifecycle operations for the note entity.
  *
@@ -3268,6 +3383,8 @@ declare class NotesRepository {
     /** User-authored original history is distinct from generated revision history. */
     getOriginalHistory(noteId: string): Promise<OriginalContentRevision[]>;
 }
+/** Local selection only. Hosted callers must supply their own authorized database context. */
+type SearchEvidenceScope = Pick<SearchOptions, 'archive_id' | 'metadataPredicates' | 'tenant_id' | 'visibility'>;
 /**
  * SearchRepository - full-text search using DatabaseClient tsvector/tsquery,
  * with optional semantic search (pgvector) and hybrid (BM25 + vector RRF).
@@ -3276,6 +3393,8 @@ declare class SearchRepository {
     private db;
     private semanticAvailable;
     constructor(db: DatabaseClient, semanticAvailable?: boolean);
+    /** Candidate citation resolution with fresh local scope and content checks. */
+    resolveEvidence(locator: unknown, scope?: SearchEvidenceScope): Promise<string>;
     private tsqueryFn;
     private fetchEmbeddingSet;
     private selectorFromOptions;
@@ -3384,6 +3503,9 @@ declare class SourceUpsertRepository {
     upsertRequest(request: SourceUpsertRequest, scope?: SourceUpsertScope): Promise<SourceUpsertResponse>;
     upsertBatch(items: readonly SourceUpsertItem[], options?: SourceUpsertOptions): Promise<SourceUpsertBatchResult>;
 }
+declare const LIFECYCLE_PURGE_MAX_NOTE_IDS = 500;
+declare const LIFECYCLE_PURGE_CONTRACT_VERSION: "1.0.0";
+declare const LIFECYCLE_PURGE_PREVIEW_TTL_SECONDS = 900;
 interface PurgeSelector {
     tenant_id?: string;
     archive_id?: null | string;
@@ -3405,33 +3527,52 @@ interface PurgeCounts {
     provenance_edges: number;
     source_identities: number;
 }
+interface PurgePreview {
+    contract_version: typeof LIFECYCLE_PURGE_CONTRACT_VERSION;
+    preview_id: string;
+    counts: PurgeCounts;
+    expires_at: string;
+}
+interface PurgeRequest {
+    operation_id: string;
+    preview_id: string;
+}
+type PurgeOutcome = 'cleanup_pending' | 'completed';
+interface PurgeReceiptPolicy {
+    authority: 'Fortemi/fortemi#1092';
+    mode: 'terminal_purge';
+    receipt_contains_content: false;
+    backup_disposition: 'beyond_use_then_reerase';
+    restore_reerasure: true;
+}
 interface DeletionReceipt {
-    id: string;
-    operation_key: string;
-    tenant_id: string;
-    archive_id: null | string;
-    selector_hash: string;
+    contract_version: typeof LIFECYCLE_PURGE_CONTRACT_VERSION;
+    operation_id: string;
     outcome: 'completed';
     counts: PurgeCounts;
     completed_at: string;
-    policy: {
-        authority: 'fortemi#1092';
-        mode: 'terminal-purge';
-        receipt_contains_content: false;
-    };
+    policy: PurgeReceiptPolicy;
 }
-interface PurgePreview {
-    selector_hash: string;
+interface PurgeStatus {
+    contract_version: typeof LIFECYCLE_PURGE_CONTRACT_VERSION;
+    operation_id: string;
+    outcome: PurgeOutcome;
     counts: PurgeCounts;
+    blob_cleanup_pending: number;
+    search_cleanup_pending: boolean;
+    receipt?: DeletionReceipt;
 }
 declare class LifecyclePurgeRepository {
     private db;
     private events?;
-    constructor(db: DatabaseClient, events?: TypedEventBus | undefined);
+    private blobStore?;
+    constructor(db: DatabaseClient, events?: TypedEventBus | undefined, blobStore?: BlobStore | undefined);
     preview(selector: PurgeSelector): Promise<PurgePreview>;
-    purge(selector: PurgeSelector, operationKey: string): Promise<DeletionReceipt>;
-    private count;
-    private deleteSelected;
+    begin(request: PurgeRequest): Promise<PurgeStatus>;
+    status(operationId: string): Promise<null | PurgeStatus>;
+    resume(operationId: string): Promise<PurgeStatus>;
+    /** Compatibility convenience: create and consume a fresh preview. */
+    purge(selector: PurgeSelector, operationId: string): Promise<DeletionReceipt>;
 }
 interface GraphNode {
     id: string;
@@ -3658,7 +3799,7 @@ interface ConditionResult {
  * @param startIdx - Starting parameter index ($N)
  * @param includeDeleted - Whether to include soft-deleted notes (default: false)
  */
-declare function buildNoteConditions(options: Pick<SearchOptions, 'collection_id' | 'date_from' | 'date_to' | 'format' | 'is_archived' | 'is_starred' | 'source' | 'tags' | 'visibility'>, startIdx: number, includeDeleted?: boolean): ConditionResult;
+declare function buildNoteConditions(options: Pick<SearchOptions, 'collection_id' | 'date_from' | 'date_to' | 'format' | 'is_archived' | 'is_starred' | 'source' | 'sources' | 'tags' | 'tagsAll' | 'visibility'>, startIdx: number, includeDeleted?: boolean): ConditionResult;
 /**
  * Job queue worker — polls job_queue for pending jobs, dispatches to registered
  * handlers, manages status transitions and exponential backoff retries.
@@ -4303,13 +4444,6 @@ declare function manageNote(db: DatabaseClient, rawInput: unknown, events?: Type
  * Input is Zod-validated at entry.
  */
 declare function searchTool(db: DatabaseClient, rawInput: unknown): Promise<SearchResponse>;
-/**
- * Zod schemas for tool function inputs.
- *
- * These schemas are the contract between callers (e.g. host platform bridge) and
- * the tool functions. All inputs are validated at the tool boundary so that
- * repository methods only receive well-typed data.
- */
 declare const CaptureKnowledgeInputSchema: z.ZodObject<{
     action: z.ZodEnum<[
         "create",
@@ -4421,6 +4555,7 @@ declare const ManageNoteInputSchema: z.ZodObject<{
 }>;
 type ManageNoteInput = z.infer<typeof ManageNoteInputSchema>;
 declare const SearchInputSchema: z.ZodObject<{
+    archive_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     collection_id: z.ZodOptional<z.ZodString>;
     date_from: z.ZodOptional<z.ZodDate>;
     date_to: z.ZodOptional<z.ZodDate>;
@@ -4434,6 +4569,7 @@ declare const SearchInputSchema: z.ZodObject<{
     is_archived: z.ZodOptional<z.ZodBoolean>;
     is_starred: z.ZodOptional<z.ZodBoolean>;
     limit: z.ZodDefault<z.ZodNumber>;
+    metadataPredicates: z.ZodOptional<z.ZodEffects<z.ZodUnknown, readonly MetadataPredicate[], unknown>>;
     mode: z.ZodDefault<z.ZodEnum<[
         "text",
         "semantic",
@@ -4445,12 +4581,14 @@ declare const SearchInputSchema: z.ZodObject<{
     query: z.ZodString;
     source: z.ZodOptional<z.ZodString>;
     tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    tenant_id: z.ZodOptional<z.ZodString>;
     visibility: z.ZodOptional<z.ZodEnum<[
         "private",
         "shared",
         "public"
     ]>>;
 }, "strip", z.ZodTypeAny, {
+    archive_id?: null | string | undefined;
     collection_id?: string | undefined;
     date_from?: Date | undefined;
     date_to?: Date | undefined;
@@ -4460,14 +4598,17 @@ declare const SearchInputSchema: z.ZodObject<{
     is_archived?: boolean | undefined;
     is_starred?: boolean | undefined;
     limit: number;
+    metadataPredicates?: readonly MetadataPredicate[] | undefined;
     mode: "auto" | "hybrid" | "semantic" | "text";
     offset: number;
     query_embedding?: number[] | undefined;
     query: string;
     source?: string | undefined;
     tags?: string[] | undefined;
+    tenant_id?: string | undefined;
     visibility?: "private" | "public" | "shared" | undefined;
 }, {
+    archive_id?: null | string | undefined;
     collection_id?: string | undefined;
     date_from?: Date | undefined;
     date_to?: Date | undefined;
@@ -4477,12 +4618,14 @@ declare const SearchInputSchema: z.ZodObject<{
     is_archived?: boolean | undefined;
     is_starred?: boolean | undefined;
     limit?: number | undefined;
+    metadataPredicates?: unknown;
     mode?: "auto" | "hybrid" | "semantic" | "text" | undefined;
     offset?: number | undefined;
     query_embedding?: number[] | undefined;
     query: string;
     source?: string | undefined;
     tags?: string[] | undefined;
+    tenant_id?: string | undefined;
     visibility?: "private" | "public" | "shared" | undefined;
 }>;
 type SearchInput = z.infer<typeof SearchInputSchema>;
@@ -6165,6 +6308,8 @@ interface AttachmentRecord extends PresenceTrackedRecord {
     id: string;
     note_id: string;
     blob_id: string;
+    /** Optional preview bytes participate in the same shared-blob ownership rules. */
+    preview_blob_id?: null | string;
     document_type_id: null | string;
     mime_type: null | string;
     extracted_text: null | string;
@@ -6233,15 +6378,43 @@ interface SourceImportBatchRecord extends PresenceTrackedRecord {
 }
 interface DeletionReceiptRecord extends PresenceTrackedRecord {
     id: string;
-    operation_key: string;
-    tenant_id: string;
-    archive_id: null | string;
-    selector_hash: string;
-    outcome: string;
+    contract_version: string;
+    operation_id: string;
+    outcome: 'completed';
     counts: Record<string, number>;
     completed_at: string;
     policy: Record<string, unknown>;
 }
+interface LifecyclePurgePreviewRecord extends PresenceTrackedRecord {
+    id: string;
+    selector_fingerprint: string;
+    selector: Record<string, unknown>;
+    selected_note_ids: string[];
+    counts: Record<string, number>;
+    expires_at: string;
+    consumed_by: null | string;
+}
+interface LifecyclePurgeOperationRecord extends PresenceTrackedRecord {
+    id: string;
+    preview_id: string;
+    selector_fingerprint: string;
+    state: 'cleanup_pending' | 'completed';
+    counts: Record<string, number>;
+    created_at: string;
+    completed_at: null | string;
+}
+interface LifecyclePurgeErasureTargetRecord extends PresenceTrackedRecord {
+    id: string;
+    operation_id: string;
+    note_id: string;
+}
+interface LifecyclePurgeBlobCleanupRecord extends PresenceTrackedRecord {
+    id: string;
+    operation_id: string;
+    blob_id: string;
+    content_hash: string;
+    completed_at: null | string;
+}
 /** Collection name → record type. The store is generic over this map. */
 interface RecordCollections {
     note: NoteRecord0;
@@ -6259,6 +6432,10 @@ interface RecordCollections {
     source_import_run: SourceImportRunRecord;
     source_import_batch: SourceImportBatchRecord;
     deletion_receipt: DeletionReceiptRecord;
+    lifecycle_purge_preview: LifecyclePurgePreviewRecord;
+    lifecycle_purge_operation: LifecyclePurgeOperationRecord;
+    lifecycle_purge_erasure_target: LifecyclePurgeErasureTargetRecord;
+    lifecycle_purge_blob_cleanup: LifecyclePurgeBlobCleanupRecord;
 }
 type RecordCollectionName = keyof RecordCollections;
 declare const RECORD_COLLECTIONS: readonly RecordCollectionName[];
@@ -6292,8 +6469,10 @@ interface RecordStoreCapabilities {
     boundedTextScan: true;
     sourceAddressedUpsert?: true;
     deletionReceipts?: true;
+    /** Purge can remove prior content-bearing journal entries atomically. */
+    purgeJournalCompaction?: true;
     typedMetadataPredicates?: false;
-    evidenceLocators?: true;
+    evidenceLocators?: false;
     fullTextSearch: false;
     vectorSearch: false;
     sqlJoins: false;
@@ -6314,6 +6493,10 @@ type RecordMutation = {
     id: string;
     op: 'delete';
 };
+interface RecordJournalKey {
+    collection: RecordCollectionName;
+    id: string;
+}
 /**
  * The writable canonical structured-record store. Implementations MUST make
  * each `put`/`remove` an atomic commit of the record mutation plus its
@@ -6331,6 +6514,11 @@ interface RecordStore {
      * An error leaves both record state and the journal unchanged.
      */
     applyBatch?(mutations: readonly RecordMutation[]): Promise<JournalEntry[]>;
+    /**
+     * Apply terminal-purge mutations while removing prior journal entries for
+     * the supplied record identities in the same transaction.
+     */
+    applyPurgeBatch?(mutations: readonly RecordMutation[], scrubJournal: readonly RecordJournalKey[]): Promise<JournalEntry[]>;
     /** All records of a collection (insertion order not guaranteed). */
     list<C extends RecordCollectionName>(collection: C, opts?: RecordListOptions): Promise<RecordCollections[C][]>;
     /** Journal entries with `seq > sinceSeq`, ascending. */
@@ -6354,6 +6542,8 @@ declare class MemoryRecordStore implements RecordStore {
     put<C extends RecordCollectionName>(collection: C, record: RecordCollections[C]): Promise<JournalEntry>;
     remove(collection: RecordCollectionName, id: string): Promise<JournalEntry>;
     applyBatch(mutations: readonly RecordMutation[]): Promise<JournalEntry[]>;
+    applyPurgeBatch(mutations: readonly RecordMutation[], scrubJournal: readonly RecordJournalKey[]): Promise<JournalEntry[]>;
+    private commitBatch;
     list<C extends RecordCollectionName>(collection: C, opts?: RecordListOptions): Promise<RecordCollections[C][]>;
     journalSince(sinceSeq: number, limit?: number): Promise<JournalEntry[]>;
     headSeq(): Promise<number>;
@@ -6377,7 +6567,7 @@ declare class MemoryRecordStore implements RecordStore {
  * discipline.
  */
 /** Logical record-schema version stored in `meta` (independent of DB_VERSION). */
-declare const RECORD_SCHEMA_VERSION = 3;
+declare const RECORD_SCHEMA_VERSION = 4;
 interface CreateRecordStoreOptions {
     /** Injectable factory for tests (fake-indexeddb). Defaults to the global. */
     indexedDB?: IDBFactory;
@@ -6392,6 +6582,8 @@ declare class IdbRecordStore implements RecordStore {
     put<C extends RecordCollectionName>(collection: C, record: RecordCollections[C]): Promise<JournalEntry>;
     remove(collection: RecordCollectionName, id: string): Promise<JournalEntry>;
     applyBatch(mutations: readonly RecordMutation[]): Promise<JournalEntry[]>;
+    applyPurgeBatch(mutations: readonly RecordMutation[], scrubJournal: readonly RecordJournalKey[]): Promise<JournalEntry[]>;
+    private commitBatch;
     list<C extends RecordCollectionName>(collection: C, opts?: RecordListOptions): Promise<RecordCollections[C][]>;
     journalSince(sinceSeq: number, limit?: number): Promise<JournalEntry[]>;
     headSeq(): Promise<number>;
@@ -6447,7 +6639,7 @@ declare class CanonicalNotesRepository {
      * Bounded substring scan over title + revised content (case-insensitive).
      * This is deliberately not ranked FTS — see `store.capabilities`.
      */
-    searchText(query: string, limit?: number): Promise<NoteRecord0[]>;
+    searchText(query: string, limit?: number, accept?: (note: NoteRecord0) => boolean): Promise<NoteRecord0[]>;
     addTag(noteId: string, tag: string): Promise<void>;
     removeTag(noteId: string, tag: string): Promise<void>;
     notesByTag(tag: string): Promise<NoteRecord0[]>;
@@ -6657,13 +6849,18 @@ declare function exportShardFromRecords(store: RecordStore, options?: ExportOpti
 declare function importShardToRecords(store: RecordStore, data: ArrayBuffer | Uint8Array, options?: ImportOptions): Promise<ImportResult>;
 declare function upsertRecordStoreRequest(store: RecordStore, request: SourceUpsertRequest, scope?: SourceUpsertScope): Promise<SourceUpsertResponse>;
 declare function upsertRecordStoreSources(store: RecordStore, items: readonly SourceUpsertItem[], options?: SourceUpsertOptions): Promise<SourceUpsertBatchResult>;
+declare function recordStorePurgeStatus(store: RecordStore, operationId: string): Promise<null | PurgeStatus>;
 declare function previewRecordStorePurge(store: RecordStore, selector: PurgeSelector): Promise<PurgePreview>;
-declare function purgeRecordStoreGraph(store: RecordStore, selector: PurgeSelector, operationKey: string): Promise<DeletionReceipt>;
+declare function beginRecordStorePurge(store: RecordStore, request: PurgeRequest, blobStore?: BlobStore): Promise<PurgeStatus>;
+declare function resumeRecordStorePurge(store: RecordStore, operationId: string, blobStore?: BlobStore): Promise<PurgeStatus>;
+/** Compatibility convenience that performs preview, deletion, and configured byte cleanup. */
+declare function purgeRecordStoreGraph(store: RecordStore, selector: PurgeSelector, operationId: string, blobStore?: BlobStore): Promise<DeletionReceipt>;
+declare function recordStoreErasureTargetIds(store: RecordStore, candidateNoteIds?: readonly string[]): Promise<Set<string>>;
 /**
  * @implements @.aiwg/adrs/ADR-011-shard-server-conformance-and-version-negotiation.md
  * @source @packages/core/src/shard/schema-validator.ts
  * @created 2026-07-17
  * @agent Codex
  */
-declare const VERSION = "2026.9.5";
-export { type ArchiveInfo, ArchiveManager, type AttachInput, type AttachmentBlobRecord, type AttachmentBlobRow, type AttachmentProjectionResult, type AttachmentRecord, type AttachmentRow, AttachmentsRepository, type BackendCandidate, type BackendCapabilities, type BackendConcept, type BackendLink, type BackendListOptions, type BackendNote, type BackendNoteFull, type BackendProvenanceEdge, type BackendRequest, type BackendSearchHit, type BackendSearchQueryOptions, type BackendSearchResult, type BackendSelection, type BackendSemanticTier, type BackendStartupCost, BlobGcOptions, BlobGcResult, BlobReconcileOptions, BlobReconcileResult, BlobStore, type BridgeCapability, BridgeInferenceProvider, type BridgeProviderInfo, type BrowserNoteExport, CORE_V1_COMPONENTS, CURRENT_MIGRATION_HEAD, type CanonicalAttachInput, CanonicalAttachmentsRepository, type CanonicalNoteCreateInput, type CanonicalNoteUpdateInput, type CanonicalNoteView, CanonicalNotesRepository, type CapabilityInfo, CapabilityManager, type CapabilityName, type CapabilityState, type CaptureKnowledgeInput, CaptureKnowledgeInputSchema, type CaptureKnowledgeResult, type CollectionCreateInput, type CollectionNoteRecord, type NativeCollection as CollectionRecord, type CollectionRow, CollectionsRepository, CommunitiesRepository, type NativeCommunityAssignment as CommunityAssignmentRecord, type CommunityAssignmentView, type CommunityCreateInput, type CommunityFilterDefinition, type CommunityGraph, type CommunityOptions, type NativeCommunity as CommunityRecord, type NativeCommunitySet as CommunitySetRecord, type CommunitySourceDescriptor, type CommunitySourceType, type CommunitySummary, type CompletionRequest, type CompletionResponse, type ConditionResult, type ConfigureInferenceRuntimeOptions, type ConfiguredInferenceProvider, type ConfiguredInferenceRuntime, type CooldownConfig, type CooldownEvent, type CosineSemanticProviderOptions, type CreatePGliteOptions, type CreateRecordStoreOptions, type CspDirectiveName, type CspDirectives, type CspViolationReport, DATASET_EXECUTION_CAPABILITY_IDS, DATASET_EXECUTION_CONTRACT, DATASET_EXECUTION_SCHEMA_VERSION, DATASET_INGEST_CONTRACT, DATASET_INGEST_SCHEMA_VERSION, DATASET_LINEAGE_CONTRACT, DATASET_LINEAGE_SCHEMA_VERSION, DATASET_MATERIALIZATION_CONTRACT, DATASET_MATERIALIZATION_KINDS, DATASET_MATERIALIZATION_SCHEMA_VERSION, DB_SNAPSHOT_SCHEMA_VERSION, DEFAULT_LARGE_DOCUMENT_CHARS, DEFAULT_LARGE_DOCUMENT_CHUNKS, type DataBackend, type DatabaseClient, type DatasetBenchmarkEvidence, type DatasetCapabilityDeclaration, type DatasetCapabilityDegradation, type DatasetCapabilityDiagnostic, type DatasetCapabilityDiagnosticCode, type DatasetCapabilityEvidence, type DatasetCapabilityLimits, type DatasetCapabilityNegotiationRequest, type DatasetCapabilityNegotiationResult, type DatasetCapabilityRequirement, type DatasetCapabilityStatus, type DatasetCapabilityWireResult, type DatasetCheckpoint, type DatasetDestinationScope, type DatasetDeterminismClass, type DatasetDigest, type DatasetExecutionCapabilityDescriptor, type DatasetExecutionCapabilityId, type DatasetExecutionDataClass, type DatasetExecutionMaturity, type DatasetExecutionPlane, type DatasetImplementationIdentity, type DatasetIncrementalParityResult, DatasetIngestError, type DatasetIngestErrorCode, DatasetIngestExecutor, type DatasetIngestHooks, type DatasetIngestMode, type DatasetIngestStore, type DatasetIngestTransaction, DatasetLineageLedger, type DatasetLineageLedgerOptions, type DatasetMaterializationAdapter, type DatasetMaterializationArtifact, DatasetMaterializationError, type DatasetMaterializationKind, type DatasetMaterializationOperation, type DatasetMaterializationProfile, type DatasetMaterializationReceipt, type DatasetMaterializationRequest, type DatasetMeasuredResources, type DatasetMutation, type DatasetMutationBatch, type DatasetOptionalCapabilityRequirement, type DatasetPrivacyBoundary, type DatasetPrivacyDecision, type DatasetProcessingPlan, type DatasetProfileNegotiationRequest, type DatasetProfileNegotiationResult, type DatasetProfileStatus, type DatasetRecordAuthorizer, type DatasetRecordRejection, type DatasetRetrievalRequest, type DatasetRetrievalResponse, type DatasetRunAttempt, type DatasetRunReceipt, type DatasetRunState, type DatasetRunStatus, type DatasetSourceRecord, type DatasetSourceSnapshot, type DatasetStoredRecord, type DatasetTombstoneMutation, type DatasetUpsertMutation, type DatasetVerificationState, type DbSnapshot, type DbSnapshotCompat, type DbSnapshotCompression, type DbSnapshotExpectations, type DbSnapshotMeta, type DbSnapshotSource, DbSnapshotVersionError, type DeletionReceipt, type DeletionReceiptRecord, type DiscoveredProvider, type DiscoveryOptions, type DumpDbSnapshotOptions, type DumpableDb, EMBED_REQUEST_KIND, EMBED_RESPONSE_KIND, type EmbedFunction, type EmbedFunctionOptions, type EmbedRequest, type EmbedRequestMessage, type EmbedResponse, type EmbedResponseMessage, type EmbedTransportPort, type EmbedWorkerOptions, type EmbeddingCompatibilityPolicy, type EmbeddingConfigRow, type EmbeddingMemberRow, type EmbeddingRow, type EmbeddingSetCreateInput, type EmbeddingSetCriteria, type EmbeddingSetDescriptor, type EmbeddingSetEmbeddingInput, type EmbeddingSetFreshness, type EmbeddingSetKind, type EmbeddingSetMode, type EmbeddingSetRow, type EmbeddingSetSelector, EmbeddingSetsRepository, type EmbeddingTaskSelectionOptions, type EnqueueJobInput, type ErrorCategory, type EventMap, type EvidenceLocator, type ExecuteDatasetBatchOptions, ExportOptions, FORTEMI_BROWSER_LOCAL_DATASET_EXECUTION_DESCRIPTOR, FORTEMI_COMPATIBILITY_PATH, FORTEMI_COMPATIBILITY_STATES, FORTEMI_PORTABLE_SHARD_DATASET_EXECUTION_DESCRIPTOR, FORTEMI_REQUIRED_COMPATIBILITY_CAPABILITIES, FORTEMI_SERVER_COMPATIBILITY_REVISION, FORTEMI_STATIC_CACHE_DATASET_EXECUTION_DESCRIPTOR, type FallbackEvent, FallbackRouter, type FallbackRouterConfig, type FetchFortemiCompatibilityOptions, type FortemiBridge, type FortemiBridgeCapabilities, type FortemiBridgeHost, type FortemiCompatibilityCapability, type FortemiCompatibilityResponse, type FortemiCompatibilityState, type FortemiCompatibilityValidationResult, type FortemiConfig, type FortemiCore, type FortemiInferenceRouter, type FortemiRequiredCompatibilityCapability, type FortemiSecretStore, type FortemiToolDefinition, FortemiToolManifest, type FullV1SnapshotImportOptions, type GetNoteInput, GetNoteInputSchema, type GpuCapabilities, type GraphCommunity, type GraphEdge, type NativeGraphEdge as GraphEdgeRecord, type GraphNode, GraphRepository, type NativeGraphSource as GraphSourceRecord, type IDisposable, IdbRecordStore, ImportOptions, ImportResult, type InferenceCapabilities, type InferenceProvider, type InferenceRuntimeConfig, type InferenceTask, JOB_CAPABILITIES, JOB_PRIORITIES, type JobQueueOptions, JobQueueWorker, type JobStatus, type JobType, type JournalEntry, LINEAGE_ENTITY_KINDS, LINEAGE_RELATIONSHIP_KINDS, LOCAL_ENDPOINTS, type LegacyInferenceProviderConfig, type LegacyMigrationReport, LifecyclePurgeRepository, type LineageActivity, type LineageAgent, type LineageAssertion, type LineageAssertionKind, type LineageAuthorizationPolicy, type LineageCorrection, type LineageEntity, type LineageEntityKind, type LineageEvidence, type LineageEvidenceReference, type LineageLedgerArchive, type LineageLossItem, type LineageLossReceipt, type LineagePrivacy, type LineageProjection, type LineageProjectionCapabilities, type LineageRelationshipKind, type LineageTraversalEdge, type LineageTraversalNode, type LineageTraversalRequest, type LineageTraversalResult, type LineageValidationCode, LineageValidationError, type NativeLink as LinkRecord, type LinkRecord0, type LinkRow, LinksRepository, type ListNotesInput, ListNotesInputSchema, type LlmCapabilityOptions, type LlmCompleteFn, type LlmCompleteOptions, type LoadedPluginScript, type LocalEndpoint, type ManageArchiveInput, ManageArchiveInputSchema, type ManageArchiveResult, type ManageAttachmentsInput, ManageAttachmentsInputSchema, type ManageAttachmentsResult, type ManageCapabilitiesInput, ManageCapabilitiesInputSchema, type ManageCapabilitiesResult, type ManageCollectionsInput, ManageCollectionsInputSchema, type ManageCollectionsResult, type ManageLinksInput, ManageLinksInputSchema, type ManageLinksResult, type ManageNoteInput, ManageNoteInputSchema, type ManageNoteResult, type ManageTagsInput, ManageTagsInputSchema, type ManageTagsResult, MemoryDatasetIngestStore, MemoryRecordStore, type MetadataPredicate, type Migration, MigrationRunner, type ModelCategory, type ModelFitResult, type ModelInfo, type NativeNamedLocation as NamedLocation, type NativeAttachmentProjection as NativeAttachmentRecord, type NativeNote as NativeNoteRecord, type NoteCreateInput, type NoteFull, type NoteListOptions, type NoteOriginalRecord, type NoteProjectionResult, type NoteRecord0, type NoteRevisedCurrentRecord, type NoteRevision, type NoteRevisionRecord, type NativeNoteSkosTag as NoteSkosAssignment, type NoteSkosTag, type NoteSummary, type NoteTagRecord, type NoteUpdateInput, NotesRepository, OpenAICompatibleProvider, type OpenAIProviderConfig, type OpenShardOptions, type OriginalContentRevision, type PGliteBackendOptions, PGliteStorageBackend, PGliteStorageBackendFactory, PGliteWorkerClient, PGliteWorkerStorageBackend, PGliteWorkerStorageBackendFactory, type PGliteWorkerStorageBackendFactoryOptions, type PaginatedResult, type PersistenceMode, type PluginCspOptions, type PluginScriptDescriptor, type PluginScriptPolicy, type PrefetchOptions, type PrefetchResult, type PresenceTrackedRecord, type ProbeResult, type ProbeStatus, type NativeProvenanceActivity as ProvenanceActivity, type NativeProvenanceRecord as ProvenanceCapture, type NativeProvenanceEdge as ProvenanceDerivation, type NativeProvenanceDevice as ProvenanceDevice, type ProvenanceEdge, type NativeProvenanceLocation as ProvenanceLocation, ProvenanceRepository, type NativeTimestampRange as ProvenanceTimeRange, type ProviderCapabilities, type ProviderCostTier, type ProviderDataClass, type ProviderPrivacyTier, type ProviderProfile, ProviderRegistry, type ProviderRoutePolicy, type ProviderRouteProbeResult, type ProviderRouteRequirements, type ProviderRouteSelection, type ProviderRouteValidation, type ProviderRouteValidationIssue, type ProviderRouteValidationSeverity, type ProviderTier, type PurgeCounts, type PurgePreview, type PurgeSelector, type QueryExecutor, type QueryResult, RECORD_COLLECTIONS, RECORD_SCHEMA_VERSION, RECORD_STORE_CAPABILITIES, REGISTERED_METADATA_PATHS, type RecommendedTier, type RecordBackendManageNoteResult, type RecordBackendOptions, type RecordCollectionName, type RecordCollections, type RecordListOptions, type RecordMutation, type RecordProjectionResult, type RecordProvenanceInput, type RecordStore, type RecordStoreCapabilities, type RegisteredMetadataPath, type RemoteBackendConfig, RemoteBackendError, type RemoteBackendErrorKind, type RemoteBackendPaths, type RemoteDataBackend, type RemoteManageNoteInput, type RemoteManageNoteResult, type RemoteProvenanceGraph, type RemoteSearchDegradation, type RemoteSearchMetadata, type RemoteSearchMode, type RemoteSearchOptions, type RemoteSearchResult, type ResolvedEmbeddingRow, type ResolvedEmbeddingSet, type RestoreDbSnapshotOptions, type RouteHandler, SOURCE_UPSERT_CONTRACT_VERSION, SOURCE_UPSERT_MAX_ITEMS, SUPPORTED_PGLITE_VERSION, type SWRegistrationResult, type SearchFacets, type SearchInput, SearchInputSchema, type SearchOptions, SearchRepository, type SearchResponse, type SearchResult, ShardBackend, type ShardBackendOptions, ShardCapabilityReport, ShardCollection, ShardComponent, type ShardComponentStore, ShardEmbedding, ShardEmbeddingConfig, ShardEmbeddingSet, ShardEmbeddingSetMember, ShardExportResult, ShardLink, type ShardListOptions, ShardLossEntry, ShardManifest, ShardNote, type ShardNoteFull, ShardNoteSkosTag, ShardOperation, ShardProfileRegistryEntry, ShardProvenanceEdge, type ShardReader, type ShardReaderNote, type ShardReaderSource, type ShardSchemaValidationResult, type ShardSearchOptions, type ShardSearchRankedNote, type ShardSearchResult, type ShardSearchWeights, ShardSkosConcept, ShardSkosRelation, ShardSkosScheme, ShardTag, ShardTemplate, type SimilarityGraphCacheKey, type SimilarityGraphOptions, type SimilarityGraphRequest, type SimilarityGraphResult, type NativeSkosCollection as SkosCollection, type NativeSkosCollectionMember as SkosCollectionMember, type SkosConcept, type NativeSkosConcept as SkosConceptRecord, type NativeSkosLabel as SkosLabel, type NativeSkosMapping as SkosMapping, type NativeSkosMembership as SkosMembership, type NativeSkosNote as SkosNote, type SkosRelation, SkosRepository, type SkosScheme, type NativeSkosScheme as SkosSchemeRecord, type SourceIdentityInput, type SourceIdentityRecord, type SourceImportBatchRecord, type SourceImportRunRecord, type SourceUpsertBatchOutcome, type SourceUpsertBatchResult, type SourceUpsertItem, type SourceUpsertItemResult, type SourceUpsertOptions, type SourceUpsertOutcome, type SourceUpsertPolicy, type SourceUpsertReasonCode, SourceUpsertRepository, type SourceUpsertRequest, type SourceUpsertRequestItem, type SourceUpsertResponse, type SourceUpsertScope, type StaticSemanticProvider, type StorageBackend, type StorageBackendFactory, type StorageOpenRequest, type StorageTopology, type StreamChunk, type NativeTag as TagRecord, TagsRepository, type TemplateCreateInput, type NativeTemplate as TemplateRecord, TemplatesRepository, TransactionProxy, TypedEventBus, VERSION, type VectorEntry, type VirtualEmbeddingSetDefinition, type VirtualEmbeddingSetSource, type VirtualEmbeddingSetValidationError, type VirtualMaterializationPolicy, type VramTier, type WorkerRequest, type WorkerResponse, aiRevisionHandler, allMigrations, appendPluginScript, assertShardComponentRecord, buildMetadataPredicateConditions, buildNoteConditions, buildPluginCsp, captureKnowledge, chunkText, classifyError, classifyModel, clearPrefetchedShard, collectionFromShard, collectionToShard, compareDatasetIncrementalParity, computeBlobHash, computeHash, computeLineageDigest, computeSri, conceptTaggingHandler, configureInferenceRuntime, cosineSimilarity, createBridgeInferenceProviders, createCosineSemanticProvider, createCspReportHandler, createFortemi, createLegacyProvider, createLocalProviderProfile, createPGliteBackend, createPGliteInstance, createRecordBackend, createRecordStore, createRemoteBackend, createRoutes, createShardBackend, createShardCapabilityReport, createWorkerEmbedFunction, datasetDestinationScopeKey, defaultStorageBackendFactory, defineInferenceProvider, defineInferenceRuntime, defineLegacyInferenceProvider, defineOpenAICompatibleProvider, deriveDatasetIngestIdempotencyKey, detectCommunities, detectGpuCapabilities, detectInferenceCapabilities, digestDatasetMaterializationValue, discoverLocalProviders, dropAttachmentProjection, dropNoteProjection, dumpDbSnapshot, embeddingConfigToShard, embeddingFromShard, embeddingGenerationHandler, embeddingSetFromShard, embeddingSetMemberToShard, embeddingSetToShard, embeddingToShard, enqueueFullWorkflow, enqueueJob, enqueueNoteCreationJobs, estimateModelFit, estimateVramMB, estimateVramTier, executeDatasetMaterialization, executeDatasetRetrieval, exportFullV1Snapshot, exportShard, exportShardFromRecords, exportShardFromRecordsWithReport, exportShardWithReport, fetchAndValidateFortemiCompatibility, fetchPluginScript, formatFortemiCompatibilitySummary, fortemiCompatibilityUrl, fortemiManifest, fromPrefetched, generateId, getConfiguredInferenceProviderId, getEmbedFunction, getEmbeddingTaskSelectionOptions, getFortemiBridge, getFortemiSecretStore, getJobQueueStatus, getKnowledgeShardContractReceipt, getKnowledgeShardProfileRegistry, getKnowledgeShardSchema, getLlmFunction, getNote, getPrefetchedSha256, getProviderRouteRequirementIssue, handleEmbedRequests, hasFortemiSecureSecrets, importFullV1Snapshot, importShard, importShardToRecords, inferInferenceTaskCapability, inferLocalEmbeddingDimensions, isPluginScriptAllowed, isShardPrefetched, linkFromShard, linkToShard, linkingHandler, listNotes, manageArchive, manageAttachments, manageCapabilities, manageCollections, manageLinks, manageNote, manageTags, matchRoute, mergeInferenceRuntimeConfigs, migrateLegacyBlobStore, negotiateDatasetExecutionCapabilities, negotiateDatasetExecutionCapabilitiesFromWire, negotiateDatasetMaterializationProfile, noteFromShard, noteSkosTagToShard, noteToShard, openShard, packTarGz, parseCspReport, prefetchShard, previewRecordStorePurge, profileSupportError, projectAttachments, projectNotes, projectRecords, provenanceEdgeToShard, providerSatisfiesRouteRequirements, purgeRecordStoreGraph, registerLlmCapability, registerSemanticCapability, registerSemanticCapabilityWorker, registerServiceWorker, restoreDbSnapshot, searchTool, selectBackend, selectEmbeddingTask, selectLlmModel, setEmbedFunction, setEmbeddingTaskSelectionOptions, setLlmFunction, sha256Hex, skosConceptToShard, skosRelationToShard, skosSchemeToShard, suggestTags, tagsToShard, templateToShard, titleGenerationHandler, unpackTarGz, unregisterLlmCapability, unregisterSemanticCapability, upsertRecordStoreRequest, upsertRecordStoreSources, urlLinkToShard, validateChecksums, validateCoreV1ShardArchive, validateDatasetBenchmarkEvidence, validateDatasetExecutionDescriptor, validateDatasetExecutionRequest, validateFortemiCompatibilityResponse, validateFullV1ShardArchive, validateProviderRoute, validateRecordV1ShardArchive, validateShardArchive, validateShardComponentRecord, validateShardManifest, verifyDbSnapshotMeta, verifySri };
+declare const VERSION = "2026.9.7";
+export { type ArchiveInfo, ArchiveManager, type AttachInput, type AttachmentBlobRecord, type AttachmentBlobRow, type AttachmentProjectionResult, type AttachmentRecord, type AttachmentRow, AttachmentsRepository, type BackendCandidate, type BackendCapabilities, type BackendConcept, type BackendLink, type BackendListOptions, type BackendNote, type BackendNoteFull, type BackendProvenanceEdge, type BackendRequest, type BackendSearchHit, type BackendSearchQueryOptions, type BackendSearchResult, type BackendSelection, type BackendSemanticTier, type BackendStartupCost, BlobGcOptions, BlobGcResult, BlobReconcileOptions, BlobReconcileResult, BlobStore, type BridgeCapability, BridgeInferenceProvider, type BridgeProviderInfo, type BrowserNoteExport, CORE_V1_COMPONENTS, CURRENT_MIGRATION_HEAD, type CanonicalAttachInput, CanonicalAttachmentsRepository, type CanonicalNoteCreateInput, type CanonicalNoteUpdateInput, type CanonicalNoteView, CanonicalNotesRepository, type CapabilityInfo, CapabilityManager, type CapabilityName, type CapabilityState, type CaptureKnowledgeInput, CaptureKnowledgeInputSchema, type CaptureKnowledgeResult, type CollectionCreateInput, type CollectionNoteRecord, type NativeCollection as CollectionRecord, type CollectionRow, CollectionsRepository, CommunitiesRepository, type NativeCommunityAssignment as CommunityAssignmentRecord, type CommunityAssignmentView, type CommunityCreateInput, type CommunityFilterDefinition, type CommunityGraph, type CommunityOptions, type NativeCommunity as CommunityRecord, type NativeCommunitySet as CommunitySetRecord, type CommunitySourceDescriptor, type CommunitySourceType, type CommunitySummary, type CompletionRequest, type CompletionResponse, type ConditionResult, type ConfigureInferenceRuntimeOptions, type ConfiguredInferenceProvider, type ConfiguredInferenceRuntime, type CooldownConfig, type CooldownEvent, type CosineSemanticProviderOptions, type CreatePGliteOptions, type CreateRecordStoreOptions, type CspDirectiveName, type CspDirectives, type CspViolationReport, DATASET_EXECUTION_CAPABILITY_IDS, DATASET_EXECUTION_CONTRACT, DATASET_EXECUTION_SCHEMA_VERSION, DATASET_INGEST_CONTRACT, DATASET_INGEST_SCHEMA_VERSION, DATASET_LINEAGE_CONTRACT, DATASET_LINEAGE_SCHEMA_VERSION, DATASET_MATERIALIZATION_CONTRACT, DATASET_MATERIALIZATION_KINDS, DATASET_MATERIALIZATION_SCHEMA_VERSION, DB_SNAPSHOT_SCHEMA_VERSION, DEFAULT_LARGE_DOCUMENT_CHARS, DEFAULT_LARGE_DOCUMENT_CHUNKS, type DataBackend, type DatabaseClient, type DatasetBenchmarkEvidence, type DatasetCapabilityDeclaration, type DatasetCapabilityDegradation, type DatasetCapabilityDiagnostic, type DatasetCapabilityDiagnosticCode, type DatasetCapabilityEvidence, type DatasetCapabilityLimits, type DatasetCapabilityNegotiationRequest, type DatasetCapabilityNegotiationResult, type DatasetCapabilityRequirement, type DatasetCapabilityStatus, type DatasetCapabilityWireResult, type DatasetCheckpoint, type DatasetDestinationScope, type DatasetDeterminismClass, type DatasetDigest, type DatasetExecutionCapabilityDescriptor, type DatasetExecutionCapabilityId, type DatasetExecutionDataClass, type DatasetExecutionMaturity, type DatasetExecutionPlane, type DatasetImplementationIdentity, type DatasetIncrementalParityResult, DatasetIngestError, type DatasetIngestErrorCode, DatasetIngestExecutor, type DatasetIngestHooks, type DatasetIngestMode, type DatasetIngestStore, type DatasetIngestTransaction, DatasetLineageLedger, type DatasetLineageLedgerOptions, type DatasetMaterializationAdapter, type DatasetMaterializationArtifact, DatasetMaterializationError, type DatasetMaterializationKind, type DatasetMaterializationOperation, type DatasetMaterializationProfile, type DatasetMaterializationReceipt, type DatasetMaterializationRequest, type DatasetMeasuredResources, type DatasetMutation, type DatasetMutationBatch, type DatasetOptionalCapabilityRequirement, type DatasetPrivacyBoundary, type DatasetPrivacyDecision, type DatasetProcessingPlan, type DatasetProfileNegotiationRequest, type DatasetProfileNegotiationResult, type DatasetProfileStatus, type DatasetRecordAuthorizer, type DatasetRecordRejection, type DatasetRetrievalRequest, type DatasetRetrievalResponse, type DatasetRunAttempt, type DatasetRunReceipt, type DatasetRunState, type DatasetRunStatus, type DatasetSourceRecord, type DatasetSourceSnapshot, type DatasetStoredRecord, type DatasetTombstoneMutation, type DatasetUpsertMutation, type DatasetVerificationState, type DbSnapshot, type DbSnapshotCompat, type DbSnapshotCompression, type DbSnapshotExpectations, type DbSnapshotMeta, type DbSnapshotSource, DbSnapshotVersionError, type DeletionReceipt, type DeletionReceiptRecord, type DiscoveredProvider, type DiscoveryOptions, type DumpDbSnapshotOptions, type DumpableDb, EMBED_REQUEST_KIND, EMBED_RESPONSE_KIND, type EmbedFunction, type EmbedFunctionOptions, type EmbedRequest, type EmbedRequestMessage, type EmbedResponse, type EmbedResponseMessage, type EmbedTransportPort, type EmbedWorkerOptions, type EmbeddingCompatibilityPolicy, type EmbeddingConfigRow, type EmbeddingMemberRow, type EmbeddingRow, type EmbeddingSetCreateInput, type EmbeddingSetCriteria, type EmbeddingSetDescriptor, type EmbeddingSetEmbeddingInput, type EmbeddingSetFreshness, type EmbeddingSetKind, type EmbeddingSetMode, type EmbeddingSetRow, type EmbeddingSetSelector, EmbeddingSetsRepository, type EmbeddingTaskSelectionOptions, type EnqueueJobInput, type ErrorCategory, type EventMap, type EvidenceLocator, type EvidenceSourceIdentity, type EvidenceTextSnapshot, type EvidenceTextUnit, type ExecuteDatasetBatchOptions, ExportOptions, FORTEMI_BROWSER_LOCAL_DATASET_EXECUTION_DESCRIPTOR, FORTEMI_COMPATIBILITY_PATH, FORTEMI_COMPATIBILITY_STATES, FORTEMI_PORTABLE_SHARD_DATASET_EXECUTION_DESCRIPTOR, FORTEMI_REQUIRED_COMPATIBILITY_CAPABILITIES, FORTEMI_SERVER_COMPATIBILITY_REVISION, FORTEMI_STATIC_CACHE_DATASET_EXECUTION_DESCRIPTOR, type FallbackEvent, FallbackRouter, type FallbackRouterConfig, type FetchFortemiCompatibilityOptions, type FortemiBridge, type FortemiBridgeCapabilities, type FortemiBridgeHost, type FortemiCompatibilityCapability, type FortemiCompatibilityResponse, type FortemiCompatibilityState, type FortemiCompatibilityValidationResult, type FortemiConfig, type FortemiCore, type FortemiInferenceRouter, type FortemiRequiredCompatibilityCapability, type FortemiSecretStore, type FortemiToolDefinition, FortemiToolManifest, type FullV1SnapshotImportOptions, type GetNoteInput, GetNoteInputSchema, type GpuCapabilities, type GraphCommunity, type GraphEdge, type NativeGraphEdge as GraphEdgeRecord, type GraphNode, GraphRepository, type NativeGraphSource as GraphSourceRecord, type IDisposable, IdbRecordStore, ImportOptions, ImportResult, type InferenceCapabilities, type InferenceProvider, type InferenceRuntimeConfig, type InferenceTask, JOB_CAPABILITIES, JOB_PRIORITIES, type JobQueueOptions, JobQueueWorker, type JobStatus, type JobType, type JournalEntry, LIFECYCLE_PURGE_CONTRACT_VERSION, LIFECYCLE_PURGE_MAX_NOTE_IDS, LIFECYCLE_PURGE_PREVIEW_TTL_SECONDS, LINEAGE_ENTITY_KINDS, LINEAGE_RELATIONSHIP_KINDS, LOCAL_ENDPOINTS, type LegacyInferenceProviderConfig, type LegacyMigrationReport, type LifecyclePurgeBlobCleanupRecord, type LifecyclePurgeErasureTargetRecord, type LifecyclePurgeOperationRecord, type LifecyclePurgePreviewRecord, LifecyclePurgeRepository, type LineageActivity, type LineageAgent, type LineageAssertion, type LineageAssertionKind, type LineageAuthorizationPolicy, type LineageCorrection, type LineageEntity, type LineageEntityKind, type LineageEvidence, type LineageEvidenceReference, type LineageLedgerArchive, type LineageLossItem, type LineageLossReceipt, type LineagePrivacy, type LineageProjection, type LineageProjectionCapabilities, type LineageRelationshipKind, type LineageTraversalEdge, type LineageTraversalNode, type LineageTraversalRequest, type LineageTraversalResult, type LineageValidationCode, LineageValidationError, type NativeLink as LinkRecord, type LinkRecord0, type LinkRow, LinksRepository, type ListNotesInput, ListNotesInputSchema, type LlmCapabilityOptions, type LlmCompleteFn, type LlmCompleteOptions, type LoadedPluginScript, type LocalEndpoint, type ManageArchiveInput, ManageArchiveInputSchema, type ManageArchiveResult, type ManageAttachmentsInput, ManageAttachmentsInputSchema, type ManageAttachmentsResult, type ManageCapabilitiesInput, ManageCapabilitiesInputSchema, type ManageCapabilitiesResult, type ManageCollectionsInput, ManageCollectionsInputSchema, type ManageCollectionsResult, type ManageLinksInput, ManageLinksInputSchema, type ManageLinksResult, type ManageNoteInput, ManageNoteInputSchema, type ManageNoteResult, type ManageTagsInput, ManageTagsInputSchema, type ManageTagsResult, MemoryDatasetIngestStore, MemoryRecordStore, type MetadataPredicate, type Migration, MigrationRunner, type ModelCategory, type ModelFitResult, type ModelInfo, type NativeNamedLocation as NamedLocation, type NativeAttachmentProjection as NativeAttachmentRecord, type NativeNote as NativeNoteRecord, type NoteCreateInput, type NoteFull, type NoteListOptions, type NoteOriginalRecord, type NoteProjectionResult, type NoteRecord0, type NoteRevisedCurrentRecord, type NoteRevision, type NoteRevisionRecord, type NativeNoteSkosTag as NoteSkosAssignment, type NoteSkosTag, type NoteSummary, type NoteTagRecord, type NoteUpdateInput, NotesRepository, OpenAICompatibleProvider, type OpenAIProviderConfig, type OpenShardOptions, type OriginalContentRevision, type PGliteBackendOptions, PGliteStorageBackend, PGliteStorageBackendFactory, PGliteWorkerClient, PGliteWorkerStorageBackend, PGliteWorkerStorageBackendFactory, type PGliteWorkerStorageBackendFactoryOptions, type PaginatedResult, type PersistenceMode, type PluginCspOptions, type PluginScriptDescriptor, type PluginScriptPolicy, type PrefetchOptions, type PrefetchResult, type PresenceTrackedRecord, type ProbeResult, type ProbeStatus, type NativeProvenanceActivity as ProvenanceActivity, type NativeProvenanceRecord as ProvenanceCapture, type NativeProvenanceEdge as ProvenanceDerivation, type NativeProvenanceDevice as ProvenanceDevice, type ProvenanceEdge, type NativeProvenanceLocation as ProvenanceLocation, ProvenanceRepository, type NativeTimestampRange as ProvenanceTimeRange, type ProviderCapabilities, type ProviderCostTier, type ProviderDataClass, type ProviderPrivacyTier, type ProviderProfile, ProviderRegistry, type ProviderRoutePolicy, type ProviderRouteProbeResult, type ProviderRouteRequirements, type ProviderRouteSelection, type ProviderRouteValidation, type ProviderRouteValidationIssue, type ProviderRouteValidationSeverity, type ProviderTier, type PurgeCounts, type PurgeOutcome, type PurgePreview, type PurgeReceiptPolicy, type PurgeRequest, type PurgeSelector, type PurgeStatus, type QueryExecutor, type QueryResult, RECORD_COLLECTIONS, RECORD_SCHEMA_VERSION, RECORD_STORE_CAPABILITIES, REGISTERED_METADATA_PATHS, type RecommendedTier, type RecordBackendManageNoteResult, type RecordBackendOptions, type RecordCollectionName, type RecordCollections, type RecordJournalKey, type RecordListOptions, type RecordMutation, type RecordProjectionResult, type RecordProvenanceInput, type RecordStore, type RecordStoreCapabilities, type RegisteredMetadataPath, type RemoteBackendConfig, RemoteBackendError, type RemoteBackendErrorKind, type RemoteBackendPaths, type RemoteDataBackend, type RemoteEvidenceResolutionOptions, type RemoteManageNoteInput, type RemoteManageNoteResult, type RemoteProvenanceGraph, type RemoteSearchDegradation, type RemoteSearchMetadata, type RemoteSearchMode, type RemoteSearchOptions, type RemoteSearchResult, type ResolvedEmbeddingRow, type ResolvedEmbeddingSet, type RestoreDbSnapshotOptions, type RouteHandler, SOURCE_UPSERT_CONTRACT_VERSION, SOURCE_UPSERT_MAX_ITEMS, SUPPORTED_PGLITE_VERSION, type SWRegistrationResult, type SearchEvidenceLocator, type SearchEvidenceOmission, type SearchEvidenceScope, type SearchEvidenceSet, type SearchFacets, type SearchInput, SearchInputSchema, type SearchOptions, SearchRepository, type SearchResponse, type SearchResult, ShardBackend, type ShardBackendOptions, ShardCapabilityReport, ShardCollection, ShardComponent, type ShardComponentStore, ShardEmbedding, ShardEmbeddingConfig, ShardEmbeddingSet, ShardEmbeddingSetMember, ShardExportResult, ShardLink, type ShardListOptions, ShardLossEntry, ShardManifest, ShardNote, type ShardNoteFull, ShardNoteSkosTag, ShardOperation, ShardProfileRegistryEntry, ShardProvenanceEdge, type ShardReader, type ShardReaderNote, type ShardReaderSource, type ShardSchemaValidationResult, type ShardSearchOptions, type ShardSearchRankedNote, type ShardSearchResult, type ShardSearchWeights, ShardSkosConcept, ShardSkosRelation, ShardSkosScheme, ShardTag, ShardTemplate, type SimilarityGraphCacheKey, type SimilarityGraphOptions, type SimilarityGraphRequest, type SimilarityGraphResult, type NativeSkosCollection as SkosCollection, type NativeSkosCollectionMember as SkosCollectionMember, type SkosConcept, type NativeSkosConcept as SkosConceptRecord, type NativeSkosLabel as SkosLabel, type NativeSkosMapping as SkosMapping, type NativeSkosMembership as SkosMembership, type NativeSkosNote as SkosNote, type SkosRelation, SkosRepository, type SkosScheme, type NativeSkosScheme as SkosSchemeRecord, type SourceIdentityInput, type SourceIdentityRecord, type SourceImportBatchRecord, type SourceImportRunRecord, type SourceUpsertBatchOutcome, type SourceUpsertBatchResult, type SourceUpsertItem, type SourceUpsertItemResult, type SourceUpsertOptions, type SourceUpsertOutcome, type SourceUpsertPolicy, type SourceUpsertReasonCode, SourceUpsertRepository, type SourceUpsertRequest, type SourceUpsertRequestItem, type SourceUpsertResponse, type SourceUpsertScope, type StaticSemanticProvider, type StorageBackend, type StorageBackendFactory, type StorageOpenRequest, type StorageTopology, type StreamChunk, type NativeTag as TagRecord, TagsRepository, type TemplateCreateInput, type NativeTemplate as TemplateRecord, TemplatesRepository, TransactionProxy, TypedEventBus, VERSION, type VectorEntry, type VirtualEmbeddingSetDefinition, type VirtualEmbeddingSetSource, type VirtualEmbeddingSetValidationError, type VirtualMaterializationPolicy, type VramTier, type WorkerRequest, type WorkerResponse, aiRevisionHandler, allMigrations, appendPluginScript, assertShardComponentRecord, beginRecordStorePurge, bindSearchEvidence, buildMetadataPredicateConditions, buildNoteConditions, buildPluginCsp, captureKnowledge, chunkText, classifyError, classifyModel, clearPrefetchedShard, collectionFromShard, collectionToShard, compareDatasetIncrementalParity, computeBlobHash, computeHash, computeLineageDigest, computeSri, conceptTaggingHandler, configureInferenceRuntime, cosineSimilarity, createBridgeInferenceProviders, createCosineSemanticProvider, createCspReportHandler, createFortemi, createLegacyProvider, createLocalProviderProfile, createPGliteBackend, createPGliteInstance, createRecordBackend, createRecordStore, createRemoteBackend, createRoutes, createSearchEvidenceSet, createShardBackend, createShardCapabilityReport, createWorkerEmbedFunction, datasetDestinationScopeKey, defaultStorageBackendFactory, defineInferenceProvider, defineInferenceRuntime, defineLegacyInferenceProvider, defineOpenAICompatibleProvider, deriveDatasetIngestIdempotencyKey, detectCommunities, detectGpuCapabilities, detectInferenceCapabilities, digestDatasetMaterializationValue, discoverLocalProviders, dropAttachmentProjection, dropNoteProjection, dumpDbSnapshot, embeddingConfigToShard, embeddingFromShard, embeddingGenerationHandler, embeddingSetFromShard, embeddingSetMemberToShard, embeddingSetToShard, embeddingToShard, enqueueFullWorkflow, enqueueJob, enqueueNoteCreationJobs, estimateModelFit, estimateVramMB, estimateVramTier, executeDatasetMaterialization, executeDatasetRetrieval, exportFullV1Snapshot, exportShard, exportShardFromRecords, exportShardFromRecordsWithReport, exportShardWithReport, fetchAndValidateFortemiCompatibility, fetchPluginScript, formatFortemiCompatibilitySummary, fortemiCompatibilityUrl, fortemiManifest, fromPrefetched, generateId, getConfiguredInferenceProviderId, getEmbedFunction, getEmbeddingTaskSelectionOptions, getFortemiBridge, getFortemiSecretStore, getJobQueueStatus, getKnowledgeShardContractReceipt, getKnowledgeShardProfileRegistry, getKnowledgeShardSchema, getLlmFunction, getNote, getPrefetchedSha256, getProviderRouteRequirementIssue, handleEmbedRequests, hasFortemiSecureSecrets, importFullV1Snapshot, importShard, importShardToRecords, inferInferenceTaskCapability, inferLocalEmbeddingDimensions, isPluginScriptAllowed, isShardPrefetched, linkFromShard, linkToShard, linkingHandler, listNotes, manageArchive, manageAttachments, manageCapabilities, manageCollections, manageLinks, manageNote, manageTags, matchRoute, mergeInferenceRuntimeConfigs, mergeSearchEvidenceSets, migrateLegacyBlobStore, negotiateDatasetExecutionCapabilities, negotiateDatasetExecutionCapabilitiesFromWire, negotiateDatasetMaterializationProfile, noteFromShard, noteSkosTagToShard, noteToShard, openShard, packTarGz, parseCspReport, parseSearchEvidenceLocator, parseSearchEvidenceSet, prefetchShard, previewRecordStorePurge, profileSupportError, projectAttachments, projectNotes, projectRecords, provenanceEdgeToShard, providerSatisfiesRouteRequirements, purgeRecordStoreGraph, recordStoreErasureTargetIds, recordStorePurgeStatus, registerLlmCapability, registerSemanticCapability, registerSemanticCapabilityWorker, registerServiceWorker, resolveSearchEvidence, restoreDbSnapshot, resumeRecordStorePurge, searchTool, selectBackend, selectEmbeddingTask, selectLlmModel, setEmbedFunction, setEmbeddingTaskSelectionOptions, setLlmFunction, sha256Hex, skosConceptToShard, skosRelationToShard, skosSchemeToShard, suggestTags, tagsToShard, templateToShard, titleGenerationHandler, unpackTarGz, unregisterLlmCapability, unregisterSemanticCapability, upsertRecordStoreRequest, upsertRecordStoreSources, urlLinkToShard, validateChecksums, validateCoreV1ShardArchive, validateDatasetBenchmarkEvidence, validateDatasetExecutionDescriptor, validateDatasetExecutionRequest, validateFortemiCompatibilityResponse, validateFullV1ShardArchive, validateProviderRoute, validateRecordV1ShardArchive, validateShardArchive, validateShardComponentRecord, validateShardManifest, verifyDbSnapshotMeta, verifySri };