@noy-db/hub 0.2.0-pre.18 → 0.2.0-pre.19

package/dist/{chunk-F2IJ2HGD.js → chunk-KYGGXXT6.js}

@@ -7,10 +7,10 @@ import {
 import {
   TxContext,
   revertExecuted
-} from "./chunk-TFAN3NFD.js";
+} from "./chunk-V3VIRTTE.js";
 import {
   OverlayedCollection
-} from "./chunk-TTS3RWL5.js";
+} from "./chunk-X7FJMKT3.js";
 import {
   NO_AGGREGATE,
   Query,
@@ -20,36 +20,36 @@ import {
   decodeMoneyFields,
   quantizeMoneyFields,
   validateMoneyFieldPaths
-} from "./chunk-647TFNYL.js";
+} from "./chunk-3Q2AOPLT.js";
 import {
   EXPORT_AUDIT_COLLECTION,
   createExportBlobsHandle,
   runCompaction
-} from "./chunk-BUBJYIZ7.js";
+} from "./chunk-U7JNBSS3.js";
 import {
   LazyQuery,
   decodeIdxId,
   encodeIdxId
-} from "./chunk-RQFG2YSV.js";
+} from "./chunk-B6E5IRPJ.js";
 import {
   canonicalGroupKey
-} from "./chunk-32XVU2LT.js";
+} from "./chunk-OBMYMKGO.js";
 import {
   readPath
-} from "./chunk-RZWQNMMP.js";
+} from "./chunk-LSIIPKYT.js";
 import {
   SCHEMAS_COLLECTION,
   loadPersistedSchema,
   resolveManagedSecret,
   savePersistedSchema,
   saveSealedPassphrase
-} from "./chunk-P57D4KBG.js";
+} from "./chunk-VNUE6FHP.js";
 import {
   loadPublicEnvelope,
   readPublicEnvelope,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-PGVEL5IZ.js";
+} from "./chunk-E66DSTJP.js";
 import {
   buildTombstone,
   isTombstone,
@@ -58,17 +58,19 @@ import {
   rewrapBodyToDek,
   rotateRecordCek,
   sealRecordToHost
-} from "./chunk-45643PAU.js";
+} from "./chunk-GKQAU52M.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-4UI5T3K7.js";
+} from "./chunk-YZE6C3TQ.js";
 import {
-  getAtPath,
   isDictCollectionName,
-  isStaticDictDescriptor,
+  isStaticDictDescriptor
+} from "./chunk-H42KZXNV.js";
+import {
+  getAtPath,
   resolvePolicy,
   setAtPathInPlace
-} from "./chunk-KOURQXIU.js";
+} from "./chunk-VEIVAYJ7.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
@@ -90,11 +92,11 @@ import {
   saveShamirRecoveryEntries,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "./chunk-IQ4GMEYZ.js";
+} from "./chunk-S22UOMHM.js";
 import {
   assertTierAccess,
   dekKey
-} from "./chunk-6YEC7LLO.js";
+} from "./chunk-FBLAWK6A.js";
 import {
   USER_ENVELOPE_COLLECTION,
   assertKeyringOpenAllowed,
@@ -119,7 +121,7 @@ import {
   rotateKeys,
   saveUserEnvelope,
   updateKeyringIdentity
-} from "./chunk-FQRAYDS4.js";
+} from "./chunk-M3FPNTO2.js";
 import {
   INDEXED_STORE_POLICY
 } from "./chunk-2QR2PQTT.js";
@@ -129,7 +131,7 @@ import {
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
-} from "./chunk-MGB67HKX.js";
+} from "./chunk-YX333DPS.js";
 import {
   sha256Hex as sha256Hex2
 } from "./chunk-PDVP3C2I.js";
@@ -141,11 +143,11 @@ import {
   readDottedPath,
   rebuildSubjectIndex,
   removeSubjectRef
-} from "./chunk-C2OYWD5S.js";
+} from "./chunk-KNKNOJFS.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION
-} from "./chunk-LGPSCKWZ.js";
+} from "./chunk-SHIUFIPW.js";
 import {
   decrypt,
   encrypt,
@@ -153,7 +155,7 @@ import {
   sha256Hex,
   unwrapCek,
   wrapCek
-} from "./chunk-QJKZ5WUP.js";
+} from "./chunk-OKOKPYWH.js";
 import {
   AlreadyElevatedError,
   AttestationError,
@@ -192,7 +194,7 @@ import {
   UnsupportedIndexOptionError,
   ValidationError,
   VaultTemplateNotFoundError
-} from "./chunk-HMFC6M2G.js";
+} from "./chunk-DJF3FXW5.js";
 
 // src/policy/storage.ts
 var META_COLLECTION = "_meta";
@@ -507,6 +509,74 @@ var DISABLED_STATE = {
   getPersistedIndexes: () => null
 };
 
+// src/search/tokenize.ts
+var WORD = /[\p{L}\p{N}]+/gu;
+var tokenize = (text) => {
+  if (!text) return [];
+  return text.normalize("NFKC").toLowerCase().match(WORD) ?? [];
+};
+
+// src/search/scan.ts
+var K1 = 1.2;
+var B = 0.75;
+function fieldText(record, field) {
+  const v = record[field];
+  if (typeof v === "string") return v;
+  if (v === null || v === void 0) return "";
+  if (typeof v === "number" || typeof v === "boolean") return String(v);
+  return "";
+}
+function searchScan(entries, field, query, opts = {}, tokenizer = tokenize) {
+  const queryTerms = tokenizer(query);
+  if (queryTerms.length === 0) return [];
+  const match = opts.match ?? "any";
+  const usePrefix = opts.prefix ?? false;
+  const exactTerms = usePrefix ? queryTerms.slice(0, -1) : queryTerms;
+  const prefixTerm = usePrefix ? queryTerms[queryTerms.length - 1] : void 0;
+  const docs = entries.map((e) => ({ id: e.id, record: e.record, terms: tokenizer(fieldText(e.record, field)) }));
+  const N = docs.length || 1;
+  const df = /* @__PURE__ */ new Map();
+  let totalLen = 0;
+  for (const d of docs) {
+    totalLen += d.terms.length;
+    for (const t of new Set(d.terms)) df.set(t, (df.get(t) ?? 0) + 1);
+  }
+  const avgdl = totalLen / N || 1;
+  let prefixDf = 0;
+  if (prefixTerm !== void 0) {
+    for (const d of docs) {
+      if (d.terms.some((t) => t.startsWith(prefixTerm))) prefixDf++;
+    }
+  }
+  const requiredCount = exactTerms.length + (prefixTerm !== void 0 ? 1 : 0);
+  const results = [];
+  for (const d of docs) {
+    const tf = /* @__PURE__ */ new Map();
+    for (const t of d.terms) tf.set(t, (tf.get(t) ?? 0) + 1);
+    const matched = [];
+    for (const qt of exactTerms) {
+      const c = tf.get(qt) ?? 0;
+      if (c > 0) matched.push({ tf: c, df: df.get(qt) ?? 0 });
+    }
+    if (prefixTerm !== void 0) {
+      let ptf = 0;
+      for (const [t, c] of tf) if (t.startsWith(prefixTerm)) ptf += c;
+      if (ptf > 0) matched.push({ tf: ptf, df: prefixDf });
+    }
+    if (matched.length === 0) continue;
+    if (match === "all" && matched.length < requiredCount) continue;
+    let score = 0;
+    for (const m of matched) {
+      const idf = Math.log(1 + (N - m.df + 0.5) / (m.df + 0.5));
+      const denom = m.tf + K1 * (1 - B + B * (d.terms.length / avgdl));
+      score += idf * (m.tf * (K1 + 1) / (denom || 1));
+    }
+    results.push({ id: d.id, score, record: d.record });
+  }
+  results.sort((a, b) => b.score - a.score);
+  return opts.limit !== void 0 ? results.slice(0, opts.limit) : results;
+}
+
 // src/indexing/unique-constraints.ts
 var UniqueConstraintSet = class {
   constructor(collectionName, uniqueDefs) {
@@ -838,7 +908,7 @@ async function resolveStaleOnRead(accessor, outputCollection, id) {
     }
     const sourceWithId = { ...source, id };
     if (DerivationExecutor === null) {
-      ({ DerivationExecutor } = await import("./executor-WLFDUTOM.js"));
+      ({ DerivationExecutor } = await import("./executor-OKFLQCDW.js"));
     }
     const ctx = { vault: accessor.getReadOnlyFacade() };
     const result = await DerivationExecutor.run(spec, sourceWithId, 0, strategyHash, ctx);
@@ -1383,7 +1453,7 @@ var Collection = class {
       }
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-PGTEGJDI.js");
+      const { resolveStaleMVOnRead } = await import("./stale-NTEV5SLX.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name);
     }
     let record;
@@ -1793,7 +1863,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-IZ2NVXCY.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-44R5CUS2.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -1802,7 +1872,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-PGTEGJDI.js");
+          staleHelpers = await import("./stale-NTEV5SLX.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -1976,7 +2046,7 @@ var Collection = class {
         continue;
       }
       if (DerivationExecutor === null) {
-        ({ DerivationExecutor } = await import("./executor-WLFDUTOM.js"));
+        ({ DerivationExecutor } = await import("./executor-OKFLQCDW.js"));
       }
       for (const run of runs) {
         const ctx = { vault: this.derivationSource.getReadOnlyFacade() };
@@ -1995,7 +2065,7 @@ var Collection = class {
           const outputCollection = this.derivationSource.getCollection(outSpec.collection);
           const txCtx = this.derivationSource.getActiveTxContext();
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-JGHXAJO5.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-DCQWJQ6S.js");
             const prior = await loadFanoutSidecar(
               this.adapter,
               this.vault,
@@ -2358,7 +2428,7 @@ var Collection = class {
       for (const [outputKey, outSpec] of Object.entries(spec.outputs)) {
         if (outSpec.shape !== "array") continue;
         if (helpers === null) {
-          helpers = await import("./fanout-sidecar-JGHXAJO5.js");
+          helpers = await import("./fanout-sidecar-DCQWJQ6S.js");
         }
         const sidecar = await helpers.loadFanoutSidecar(
           this.adapter,
@@ -2398,7 +2468,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-IZ2NVXCY.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-44R5CUS2.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -2407,7 +2477,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-PGTEGJDI.js");
+          staleHelpers = await import("./stale-NTEV5SLX.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -2430,7 +2500,7 @@ var Collection = class {
       );
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-PGTEGJDI.js");
+      const { resolveStaleMVOnRead } = await import("./stale-NTEV5SLX.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name);
     }
     await this.ensureHydrated();
@@ -2446,6 +2516,29 @@ var Collection = class {
   hasReadTransforms() {
     return this.moneyFields !== void 0 && Object.keys(this.moneyFields).length > 0 || this.i18nFields !== void 0 && Object.keys(this.i18nFields).length > 0 || this.dictKeyFields !== void 0 && Object.keys(this.dictKeyFields).length > 0;
   }
+  /**
+   * Scan-mode full-text search over a plain-text `field` (#308). Decrypts the
+   * collection in memory and ranks records by BM25 against the tokenized query.
+   * **Zero added store leakage** — pure client-side scan; nothing searchable is
+   * written to the store. (A store-usable blind index for at-scale search is a
+   * separate, gated opt-in — see the #308 design note.) Eager mode only.
+   *
+   * `opts.match` (`'any'` default | `'all'`), `opts.prefix` (last query term as
+   * a prefix → typeahead), `opts.limit` (top-N). Returns `{ id, score, record }`
+   * ranked by descending score. The default tokenizer is word-boundary based —
+   * see `src/search/tokenize.ts` for the Thai/CJK caveat.
+   */
+  async search(field, query, opts = {}) {
+    if (this.lazy) {
+      throw new Error(
+        `Collection "${this.name}": search() (scan mode) requires eager mode (prefetch: true). A store-usable blind index for lazy / at-scale search is a separate gated opt-in (#308).`
+      );
+    }
+    await this.ensureHydrated();
+    const entries = [];
+    for (const [id, e] of this.cache) entries.push({ id, record: e.record });
+    return searchScan(entries, field, query, opts);
+  }
   // ─── Bulk operations ─────────────────────────────────────
   /**
    * Put many records in one call. Each item is processed sequentially
@@ -2623,6 +2716,10 @@ var Collection = class {
       leftCollection,
       resolveRef: (field) => resolver.resolveRef(leftCollection, field),
       resolveSource: (collectionName) => resolver.resolveSource(collectionName),
+      // #285 §3 — flow the vault/collection default locale to joins so a
+      // joined i18n field resolves like get()/list() when no per-call
+      // locale is given; toArray({ locale }) overrides it.
+      ...this.defaultLocale !== void 0 ? { defaultLocale: this.defaultLocale } : {},
       ...resolver.resolveDictSource ? { resolveDictSource: (field) => resolver.resolveDictSource(leftCollection, field) } : {}
     } : void 0;
     return new Query(source, void 0, joinContext, this.aggregateStrategy);
@@ -2711,7 +2808,10 @@ var Collection = class {
         };
         this.emitter.on("change", handler);
         return () => this.emitter.off("change", handler);
-      }
+      },
+      // #285 §3 — expose this (right-side) collection's i18nText descriptors so
+      // the join executor can resolve joined i18n fields at the `join` layer.
+      ...this.i18nFields !== void 0 ? { i18nFields: this.i18nFields } : {}
     };
   }
   /**
@@ -2944,6 +3044,10 @@ var Collection = class {
       leftCollection,
       resolveRef: (field) => resolver.resolveRef(leftCollection, field),
       resolveSource: (collectionName) => resolver.resolveSource(collectionName),
+      // #285 §3 — flow the vault/collection default locale to joins so a
+      // joined i18n field resolves like get()/list() when no per-call
+      // locale is given; toArray({ locale }) overrides it.
+      ...this.defaultLocale !== void 0 ? { defaultLocale: this.defaultLocale } : {},
       ...resolver.resolveDictSource ? { resolveDictSource: (field) => resolver.resolveDictSource(leftCollection, field) } : {}
     } : void 0;
     return new ScanBuilder(
@@ -3501,6 +3605,34 @@ var Collection = class {
       }
     }
   }
+  /**
+   * @internal — hard-delete this record's persisted `_idx/<field>/<recordId>`
+   * side-cars for the erasure path (#401). `forget()` crypto-shreds the body but
+   * keeps the collection DEK, under which these side-cars are encrypted — so
+   * without this they leave the indexed field VALUES readable after a "forget".
+   *
+   * Content-free: the side-car id is `encodeIdxId(def.key, id)`, so it needs no
+   * body decode (the body is being shredded). Eager mode has no durable side-car
+   * → no-op. The in-memory mirror is left as-is: it is ephemeral (rebuilt from
+   * the now-deleted side-cars on reopen) and live reads skip the tombstone, so a
+   * stale mirror hit cannot surface the erased record. Returns the count deleted
+   * + the `def.key`s whose delete FAILED (residue that still leaks the value).
+   */
+  async _purgePersistedIndexes(id) {
+    const persisted = this.persistedIndexes;
+    if (!persisted) return { purged: 0, residue: [] };
+    let purged = 0;
+    const residue = [];
+    for (const def of persisted.definitions()) {
+      try {
+        await this.adapter.delete(this.vault, this.name, encodeIdxId(def.key, id));
+        purged++;
+      } catch {
+        residue.push(def.key);
+      }
+    }
+    return { purged, residue };
+  }
   /**
    * Bulk-load the persisted-index mirror from `_idx/<field>/*` side-cars
    * on first lazy-mode query. Idempotent — subsequent calls short-circuit
@@ -6953,12 +7085,12 @@ var Vault = class {
     if (!fieldSchema) {
       throw new AttestationError(`issueAttestation: collection '${collectionName}' has no attestation field-schema. Declare it via vault.collection('${collectionName}', { attestation: { fields: [...] } }).`);
     }
-    const { issueAttestationCore } = await import("./issue-R2MWQO6K.js");
+    const { issueAttestationCore } = await import("./issue-EPA2PSWP.js");
     const out = await issueAttestationCore(this.makeIssueContext(), { collection: collectionName, id, fieldSchema });
     return { docId: out.docId, qr: out.qr, keyId: out.keyId, publicKeyB64: out.publicKeyB64 };
   }
   async getDocumentSigningPublicKey() {
-    const { loadSigner, loadOrCreateSigner } = await import("./signer-HAVDLGOK.js");
+    const { loadSigner, loadOrCreateSigner } = await import("./signer-UNWOUJAK.js");
     const existing = await loadSigner(this.adapter, this.name, this.getDEK);
     if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
     if (this.keyring.role !== "owner") {
@@ -6984,19 +7116,19 @@ var Vault = class {
     };
   }
   async revokeAttestation(docId) {
-    const { revokeDocCore } = await import("./revoke-7LCWE2AH.js");
+    const { revokeDocCore } = await import("./revoke-IFLXEZA5.js");
     await revokeDocCore(this.makeRevokeContext(), docId);
   }
   async unrevokeAttestation(docId) {
-    const { unrevokeDocCore } = await import("./revoke-7LCWE2AH.js");
+    const { unrevokeDocCore } = await import("./revoke-IFLXEZA5.js");
     await unrevokeDocCore(this.makeRevokeContext(), docId);
   }
   async getRevokedDocIds() {
-    const { getRevokedDocIdsCore } = await import("./revoke-7LCWE2AH.js");
+    const { getRevokedDocIdsCore } = await import("./revoke-IFLXEZA5.js");
     return getRevokedDocIdsCore(this.makeRevokeContext());
   }
   async publishRevocationList() {
-    const { publishRevocationListCore } = await import("./revoke-7LCWE2AH.js");
+    const { publishRevocationListCore } = await import("./revoke-IFLXEZA5.js");
     return publishRevocationListCore(this.makeRevokeContext());
   }
   makeRevokeContext() {
@@ -7455,6 +7587,8 @@ var Vault = class {
     const blobResidueCollections = /* @__PURE__ */ new Set();
     let blobsShredded = 0;
     let blobsRetainedShared = 0;
+    let indexPostingsPurged = 0;
+    const indexResidue = [];
     const blobsEnabled = this.blobStrategy !== void 0;
     const actor = this.keyring.userId;
     for (const ref2 of refs) {
@@ -7476,6 +7610,9 @@ var Vault = class {
         ref2.id,
         actor
       );
+      const idxPurge = await coll._purgePersistedIndexes(ref2.id);
+      indexPostingsPurged += idxPurge.purged;
+      for (const field of idxPurge.residue) indexResidue.push(`${ref2.collection}:${ref2.id}:${field}`);
       if (blobsEnabled) {
         const r = await this.collection(ref2.collection).blob(ref2.id).shredAllForRecord();
         blobsShredded += r.shredded.length;
@@ -7511,7 +7648,9 @@ var Vault = class {
         unmigratedCount: unmigratedRecords.length,
         blobsShredded,
         blobsRetainedShared,
-        blobResidueCollections: [...blobResidueCollections]
+        blobResidueCollections: [...blobResidueCollections],
+        indexPostingsPurged,
+        indexResidueCount: indexResidue.length
       })
     });
     return {
@@ -7523,6 +7662,8 @@ var Vault = class {
       blobsShredded,
       blobsRetainedShared,
       blobResidueCollections: [...blobResidueCollections],
+      indexPostingsPurged,
+      indexResidue,
       ledgerEntry
     };
   }
@@ -7646,7 +7787,7 @@ var Vault = class {
   async _initDerivations(handles) {
     if (handles.length === 0) return;
     const [{ DerivationRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-DMS7OKBM.js"),
+      import("./registry-ERNAMRDE.js"),
       import("./read-only-facade-EX6WZZBP.js")
     ]);
     const registry = new DerivationRegistry();
@@ -7677,7 +7818,7 @@ var Vault = class {
    */
   async _initMaterializedViews(handles) {
     if (handles.length === 0) return;
-    const { MaterializedViewRegistry } = await import("./registry-WVXO6NH5.js");
+    const { MaterializedViewRegistry } = await import("./registry-RDPTFXQ7.js");
     const registry = new MaterializedViewRegistry();
     this.materializedViewRegistry = registry;
     const db = this;
@@ -7701,7 +7842,7 @@ var Vault = class {
    */
   async _initOverlayedViews(handles) {
     if (handles.length === 0) return;
-    const { OverlayedViewRegistry } = await import("./registry-3T2RZC5A.js");
+    const { OverlayedViewRegistry } = await import("./registry-EXTHSXQW.js");
     const registry = new OverlayedViewRegistry();
     const mvRegistry = this.materializedViewRegistry;
     const overlayNames = /* @__PURE__ */ new Set();
@@ -7748,13 +7889,13 @@ var Vault = class {
     if (!reg) {
       throw new Error(`refreshView: no MV registered with name "${name}"`);
     }
-    const { MaterializedViewExecutor } = await import("./executor-IZ2NVXCY.js");
+    const { MaterializedViewExecutor } = await import("./executor-44R5CUS2.js");
     const result = await MaterializedViewExecutor.refresh(reg, {
       getCollection: (n) => this.collection(n),
       getActiveTxContext: () => this.noydb._activeTxContextOrNull,
       getQueryContext: () => this
     });
-    const { clearMVStale } = await import("./stale-PGTEGJDI.js");
+    const { clearMVStale } = await import("./stale-NTEV5SLX.js");
     clearMVStale(registry, name);
     return result;
   }
@@ -7770,7 +7911,7 @@ var Vault = class {
     if (registry === null) return { derived: 0, failed: 0 };
     const strategies = registry.strategiesForSource(sourceCollection);
     if (strategies.length === 0) return { derived: 0, failed: 0 };
-    const { DerivationExecutor } = await import("./executor-WLFDUTOM.js");
+    const { DerivationExecutor } = await import("./executor-OKFLQCDW.js");
     const sourceColl = this.collection(sourceCollection);
     const records = await sourceColl.list();
     const ctx = { vault: this.derivationFacade ?? new (await import("./read-only-facade-EX6WZZBP.js")).ReadOnlyVaultFacade(this, "derivation") };
@@ -7795,7 +7936,7 @@ var Vault = class {
           if (!outSpec) continue;
           const outputColl = this.collection(outSpec.collection);
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-JGHXAJO5.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-DCQWJQ6S.js");
             const prior = await loadFanoutSidecar(this.adapter, this.name, spec.source, id, key);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -8017,7 +8158,7 @@ var Vault = class {
    * collection.
    */
   async delegate(opts) {
-    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-FMXNUWE6.js");
+    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-5HON72PV.js");
     if (!this.keyring.kek) {
       throw new ValidationError(
         "issueDelegation: keyring.kek is null \u2014 issuing a delegation requires a tier-1 unlock. Re-authenticate at tier 1 (passphrase) first."
@@ -8039,7 +8180,7 @@ var Vault = class {
    * if the id does not exist.
    */
   async revokeDelegation(id) {
-    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-FMXNUWE6.js");
+    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-5HON72PV.js");
     await revokeDelegation(this.adapter, this.name, id);
     void DELEGATIONS_COLLECTION;
   }
@@ -8508,7 +8649,7 @@ var Vault = class {
    * @see docs/subsystems/public-envelope.md
    */
   async getPublicEnvelope(opts = {}) {
-    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-HXOFHY4N.js");
+    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-AGU6SS4Z.js");
     return readPublicEnvelope2(this.adapter, this.name, opts);
   }
   /**
@@ -8785,6 +8926,8 @@ var Vault = class {
    */
   async *exportStream(opts = {}) {
     const granularity = opts.granularity ?? "collection";
+    const exportLocale = opts.resolveLabels;
+    const localeOpts = exportLocale !== void 0 ? { locale: exportLocale, _layer: "export" } : void 0;
     const snapshot = await this.adapter.loadAll(this.name);
     const collectionNames = Object.keys(snapshot).sort();
     const ledgerHead = opts.withLedgerHead ? await (async () => {
@@ -8794,19 +8937,21 @@ var Vault = class {
       return head ? { hash: head.hash, index: head.entry.index, ts: head.entry.ts } : void 0;
     })() : void 0;
     const dictSnapshotCache = /* @__PURE__ */ new Map();
-    for (const collectionName of collectionNames) {
-      const dictFields = this.dictKeyFieldRegistry.get(collectionName);
-      if (dictFields && Object.keys(dictFields).length > 0) {
-        const snap = {};
-        for (const [fieldName, dictName] of Object.entries(dictFields)) {
-          const entries = await this.dictionary(dictName).list();
-          const keyMap = {};
-          for (const entry of entries) {
-            keyMap[entry.key] = entry.labels;
+    if (exportLocale === void 0) {
+      for (const collectionName of collectionNames) {
+        const dictFields = this.dictKeyFieldRegistry.get(collectionName);
+        if (dictFields && Object.keys(dictFields).length > 0) {
+          const snap = {};
+          for (const [fieldName, dictName] of Object.entries(dictFields)) {
+            const entries = await this.dictionary(dictName).list();
+            const keyMap = {};
+            for (const entry of entries) {
+              keyMap[entry.key] = entry.labels;
+            }
+            snap[fieldName] = keyMap;
           }
-          snap[fieldName] = keyMap;
+          dictSnapshotCache.set(collectionName, snap);
         }
-        dictSnapshotCache.set(collectionName, snap);
       }
     }
     for (const collectionName of collectionNames) {
@@ -8819,7 +8964,7 @@ var Vault = class {
       if (granularity === "collection") {
         const records = [];
         for (const id of ids) {
-          const record = await coll.get(id);
+          const record = await coll.get(id, localeOpts);
           if (record !== null) records.push(record);
         }
         const chunk = {
@@ -8833,7 +8978,7 @@ var Vault = class {
         yield chunk;
       } else {
         for (const id of ids) {
-          const record = await coll.get(id);
+          const record = await coll.get(id, localeOpts);
           if (record === null) continue;
           const chunk = {
             collection: collectionName,
@@ -8937,7 +9082,10 @@ var Vault = class {
     const allDictionaries = {};
     for await (const chunk of this.exportStream({
       granularity: "collection",
-      withLedgerHead: opts.withLedgerHead === true
+      withLedgerHead: opts.withLedgerHead === true,
+      // #285 export layer: thread the export locale so records are read at the
+      // `export` layer (i18nText collapsed + dictKey/staticDict labels resolved).
+      ...opts.resolveLabels !== void 0 ? { resolveLabels: opts.resolveLabels } : {}
     })) {
       collections[chunk.collection] = {
         schema: null,
@@ -10173,7 +10321,7 @@ var Noydb = class {
       if (!facade) return;
       const ctx = { existing, vault: facade, userId: e.userId, role: e.role };
       await registry.runChecks(e.collection, incoming, ctx);
-      const { GuardExecutor } = await import("./executor-THSEYEJG.js");
+      const { GuardExecutor } = await import("./executor-AOACUK7Z.js");
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, e.docId, existing, incoming, e.computedFieldNames);
       }
@@ -10774,8 +10922,8 @@ var Noydb = class {
     if (name === STATE_VAULT_NAME) throw new ReservedVaultNameError(name);
     const template = this.vaultTemplates.get(opts.sharding.vaultTemplate);
     if (!template) throw new VaultTemplateNotFoundError(opts.sharding.vaultTemplate);
-    const { VaultGroup } = await import("./vault-group-DPZVFRI5.js");
-    const { StateManagementVault } = await import("./state-vault-QKQKN3H3.js");
+    const { VaultGroup } = await import("./vault-group-27EV7KB4.js");
+    const { StateManagementVault } = await import("./state-vault-TUTFRTOA.js");
     const stateVault = opts.registry ? void 0 : await StateManagementVault.open(this);
     const registry = opts.registry ?? stateVault.registry;
     const group = new VaultGroup(this, name, registry, opts.sharding, template, opts.migrateOnOpen ?? false);
@@ -10802,7 +10950,7 @@ var Noydb = class {
    */
   async openStateManagementVault() {
     if (this.closed) throw new ValidationError("Instance is closed");
-    const { StateManagementVault } = await import("./state-vault-QKQKN3H3.js");
+    const { StateManagementVault } = await import("./state-vault-TUTFRTOA.js");
     return StateManagementVault.open(this);
   }
   /**
@@ -10812,6 +10960,16 @@ var Noydb = class {
   async _shardVaultProvisioned(vaultId) {
     return (await this.options.store.list(vaultId, "_keyring")).length > 0;
   }
+  /**
+   * @internal — the physical backend store a vault id maps to. A
+   * `routeStore` resolves the vault-prefix route via its `resolveBackend`;
+   * a plain store is its own backend. Used by the federation data-residency
+   * guard to read the placement backend's `capabilities.region` (#271).
+   */
+  _resolveBackend(vaultId) {
+    const store = this.options.store;
+    return store.resolveBackend ? store.resolveBackend(vaultId) : this.options.store;
+  }
   /**
    * Change the current user's passphrase for a vault.
    *
@@ -12333,6 +12491,7 @@ export {
   describeAllUsersAuth,
   ComputedFieldError,
   evalComputedFields,
+  tokenize,
   Lru,
   parseBytes,
   estimateRecordBytes,
@@ -12349,4 +12508,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-F2IJ2HGD.js.map
+//# sourceMappingURL=chunk-KYGGXXT6.js.map