@noy-db/hub 0.2.0-pre.19 → 0.2.0-pre.20

package/dist/index.cjs

@@ -46,7 +46,7 @@ var init_types = __esm({
 });
 
 // src/errors.ts
-var NoydbError, DecryptionError, TamperedError, InvalidKeyError, KeyringCorruptError, NoAccessError, ReadOnlyError, ReadOnlyAtInstantError, ReadOnlyFrameError, PermissionDeniedError, ExportCapabilityError, KeyringExpiredError, ImportCapabilityError, StoreCapabilityError, PrivilegeEscalationError, ReservedVaultNameError, PeriodClosedError, RecordLockedError, FieldFrozenError, IllegalTransitionError, InvariantError, AmendmentForbiddenError, DirectoryDisabledError, TierNotGrantedError, ElevationExpiredError, AlreadyElevatedError, TierDemoteDeniedError, DelegationTargetMissingError, ConflictError, LedgerContentionError, SequenceContentionError, SequenceOfflineError, NumberingUncertaintyError, BundleVersionConflictError, NetworkError, NotFoundError, ValidationError, SchemaValidationError, SchemaUpdateError, NonAdditiveSchemaChangeError, SchemaLockedError, SchemaFenceError, MigrationRequiredError, QuiesceTimeoutError, GroupCardinalityError, IndexRequiredError, UniqueConstraintError, UnsupportedIndexOptionError, IndexWriteFailureError, BundleIntegrityError, BundleSealMismatchError, ReservedCollectionNameError, DictKeyMissingError, DictKeyInUseError, MissingTranslationError, LocaleNotSpecifiedError, ScriptViolationError, StaticDictReadonlyError, UnknownDictCodeError, TranslatorNotConfiguredError, BackupLedgerError, BackupCorruptedError, AttestationError, SessionExpiredError, SessionNotFoundError, SessionPolicyError, JoinTooLargeError, CrossJoinTooLargeError, CrossJoinSourceUnknownError, DanglingReferenceError, FilenameSanitizationError, PathEscapeError, DerivationCycleError, DerivationDepthError, DerivationOutputUnknownError, DerivationOutputShapeError, DerivationCapExceededError, MaterializedViewCycleError, MaterializedViewSourceUnknownError, MaterializedViewTooLargeError, MaterializedViewConfigError, OverlayBaseIsVirtualError, OverlayCollectionUnavailableError, OverlayNameCollisionError, OverlayIdMismatchError, SnapshotNotFoundError, UnknownShardError, ShardProvisioningError, DataResidencyError, CrossShardJoinError, VaultTemplateNotFoundError, ForgetStrategyNotConfiguredError, SealedRecordExpiredError, SealedRecordMismatchError, RecordCekNotFoundError;
+var NoydbError, DebugPlaintextError, DebugReservedFieldError, DecryptionError, TamperedError, InvalidKeyError, KeyringCorruptError, NoAccessError, ReadOnlyError, ReadOnlyAtInstantError, ReadOnlyFrameError, PermissionDeniedError, ExportCapabilityError, KeyringExpiredError, ImportCapabilityError, StoreCapabilityError, PrivilegeEscalationError, ReservedVaultNameError, PeriodClosedError, RecordLockedError, FieldFrozenError, IllegalTransitionError, InvariantError, AmendmentForbiddenError, DirectoryDisabledError, TierNotGrantedError, ElevationExpiredError, AlreadyElevatedError, TierDemoteDeniedError, DelegationTargetMissingError, ConflictError, LedgerContentionError, SequenceContentionError, SequenceOfflineError, NumberingUncertaintyError, BundleVersionConflictError, NetworkError, NotFoundError, ValidationError, SchemaValidationError, SchemaUpdateError, NonAdditiveSchemaChangeError, SchemaLockedError, SchemaFenceError, MigrationRequiredError, QuiesceTimeoutError, GroupCardinalityError, IndexRequiredError, UniqueConstraintError, UnsupportedIndexOptionError, IndexWriteFailureError, BundleIntegrityError, BundleSealMismatchError, ReservedCollectionNameError, DictKeyMissingError, DictKeyInUseError, MissingTranslationError, LocaleNotSpecifiedError, ScriptViolationError, StaticDictReadonlyError, UnknownDictCodeError, TranslatorNotConfiguredError, BackupLedgerError, BackupCorruptedError, AttestationError, SessionExpiredError, SessionNotFoundError, SessionPolicyError, JoinTooLargeError, CrossJoinTooLargeError, CrossJoinSourceUnknownError, DanglingReferenceError, FilenameSanitizationError, PathEscapeError, DerivationCycleError, DerivationDepthError, DerivationOutputUnknownError, DerivationOutputShapeError, DerivationCapExceededError, MaterializedViewCycleError, MaterializedViewSourceUnknownError, MaterializedViewTooLargeError, MaterializedViewConfigError, OverlayBaseIsVirtualError, OverlayCollectionUnavailableError, OverlayNameCollisionError, OverlayIdMismatchError, SnapshotNotFoundError, UnknownShardError, ShardProvisioningError, DataResidencyError, CrossShardJoinError, VaultTemplateNotFoundError, ForgetStrategyNotConfiguredError, SealedRecordExpiredError, SealedRecordMismatchError, RecordCekNotFoundError;
 var init_errors = __esm({
   "src/errors.ts"() {
     "use strict";
@@ -59,6 +59,21 @@ var init_errors = __esm({
         this.code = code;
       }
     };
+    DebugPlaintextError = class extends NoydbError {
+      constructor(message = "debugPlaintext requires encrypt: false") {
+        super("DEBUG_PLAINTEXT_REQUIRES_UNENCRYPTED", message);
+        this.name = "DebugPlaintextError";
+      }
+    };
+    DebugReservedFieldError = class extends NoydbError {
+      constructor(collection, field) {
+        super(
+          "DEBUG_RESERVED_FIELD",
+          `Record in "${collection}" has reserved field "${field}": the _ prefix is reserved under debugPlaintext mode`
+        );
+        this.name = "DebugReservedFieldError";
+      }
+    };
     DecryptionError = class extends NoydbError {
       constructor(message = "Decryption failed") {
         super("DECRYPTION_FAILED", message);
@@ -6414,6 +6429,8 @@ __export(src_exports, {
   DIRECTORY_RECORD_ID: () => DIRECTORY_RECORD_ID,
   DanglingReferenceError: () => DanglingReferenceError,
   DataResidencyError: () => DataResidencyError,
+  DebugPlaintextError: () => DebugPlaintextError,
+  DebugReservedFieldError: () => DebugReservedFieldError,
   DecryptionError: () => DecryptionError,
   DelegationTargetMissingError: () => DelegationTargetMissingError,
   DerivationCapExceededError: () => DerivationCapExceededError,
@@ -6642,6 +6659,7 @@ __export(src_exports, {
   hashEntry: () => hashEntry,
   i18nText: () => i18nText,
   immutableGuard: () => immutableGuard,
+  importExternalObjects: () => importExternalObjects,
   inferScripts: () => inferScripts,
   isDevUnlockActive: () => isDevUnlockActive,
   isDictCollectionName: () => isDictCollectionName,
@@ -6679,6 +6697,7 @@ __export(src_exports, {
   lockSchema: () => lockSchema,
   magicLinkGrantRecordId: () => magicLinkGrantRecordId,
   max: () => max,
+  memoryObjectProjection: () => memoryObjectProjection,
   mergeCrdtStates: () => mergeCrdtStates,
   mergePolicy: () => mergePolicy,
   min: () => min,
@@ -6703,6 +6722,7 @@ __export(src_exports, {
   readNoydbBundleHeader: () => readNoydbBundleHeader,
   readNoydbBundlePublicEnvelope: () => readNoydbBundlePublicEnvelope,
   readPath: () => readPath,
+  readPlaintextRecord: () => readPlaintextRecord,
   readPublicEnvelope: () => readPublicEnvelope,
   readUserVisibility: () => readUserVisibility,
   recoverUser: () => recoverUser,
@@ -7172,6 +7192,9 @@ var BlobSet = class {
   userId;
   maxBlobBytes;
   erasableBlobs;
+  debugPlaintext;
+  objectStore;
+  blobFields;
   constructor(opts) {
     this.store = opts.store;
     this.vault = opts.vault;
@@ -7182,6 +7205,9 @@ var BlobSet = class {
     this.userId = opts.userId;
     this.maxBlobBytes = opts.maxBlobBytes;
     this.erasableBlobs = opts.erasableBlobs === true;
+    this.debugPlaintext = opts.debugPlaintext === true;
+    this.objectStore = opts.objectStore;
+    this.blobFields = opts.blobFields;
   }
   /**
    * Resolve the key the blob's CHUNKS are encrypted under.
@@ -7569,6 +7595,49 @@ var BlobSet = class {
    *    If overwriting an existing slot, decrements the old eTag's refCount.
    */
   async put(slotName, data, opts) {
+    if (this.objectStore && this.blobFields?.[slotName]?.external) {
+      const policy = this.blobFields[slotName];
+      let contentType = opts?.mimeType;
+      if (!contentType) {
+        const detected = detectMagic(data.subarray(0, 16));
+        contentType = detected?.mime ?? "application/octet-stream";
+      }
+      const key = `${this.collection}/${this.recordId}/${slotName}`;
+      const isPublic = policy.public === true;
+      const backlink = await this.buildBacklink(slotName, policy.backlink ?? "opaque-token");
+      await this.objectStore.putObject(key, data, {
+        contentType,
+        public: isPublic,
+        ...backlink.userMeta ? { userMeta: backlink.userMeta } : {}
+      });
+      const uploaderUserId2 = opts?.uploadedBy ?? this.userId;
+      let oldETag;
+      await this.casUpdateSlots((slots) => {
+        oldETag = slots[slotName]?.eTag || void 0;
+        const prevMeta = slots[slotName]?.external?.meta;
+        slots[slotName] = {
+          eTag: "",
+          external: {
+            key,
+            contentType,
+            ...isPublic ? { public: true } : {},
+            ...backlink.token ? { backlink: backlink.token } : {},
+            ...prevMeta ? { meta: prevMeta } : {}
+          },
+          filename: slotName,
+          size: data.byteLength,
+          mimeType: contentType,
+          uploadedAt: (/* @__PURE__ */ new Date()).toISOString(),
+          ...uploaderUserId2 !== void 0 ? { uploadedBy: uploaderUserId2 } : {}
+        };
+        return slots;
+      });
+      if (oldETag) {
+        await this.releaseRef(oldETag, 1, false).catch(() => {
+        });
+      }
+      return;
+    }
     const blobDEK = this.encrypted ? await this.getDEK(BLOB_COLLECTION) : null;
     const eTag = blobDEK ? await hmacSha256Hex(blobDEK, data) : await plainSha256Hex(data);
     let mimeType = opts?.mimeType;
@@ -7584,12 +7653,13 @@ var BlobSet = class {
     } else {
       shouldCompress = true;
     }
+    if (this.debugPlaintext) shouldCompress = false;
     const existingBlob = await this.loadBlobObject(eTag);
     if (existingBlob) {
       await this.casUpdateRefCount(eTag, 1);
     } else {
       const { bytes: compressed, algorithm } = shouldCompress ? await compressBytes(data) : { bytes: data, algorithm: "none" };
-      const chunkSize = this.effectiveChunkSize(opts);
+      const chunkSize = this.debugPlaintext ? Math.max(compressed.byteLength, 1) : this.effectiveChunkSize(opts);
       const chunkCount = Math.max(1, Math.ceil(compressed.byteLength / chunkSize));
       let chunkKey = blobDEK;
       let wrappedCek;
@@ -7654,10 +7724,114 @@ var BlobSet = class {
     const { slots } = await this.loadSlots();
     const slot = slots[slotName];
     if (!slot) return null;
+    if (slot.external) {
+      if (!this.objectStore) {
+        throw new NotFoundError(`Blob slot "${slotName}" is external but no objectStore is configured`);
+      }
+      return this.objectStore.getObject(slot.external.key);
+    }
     const result = await this.loadBlobObject(slot.eTag);
     if (!result) return null;
     return this.fetchAllChunks(result.blob);
   }
+  /**
+   * A URL to fetch an `external` slot's object directly — presigned
+   * (time-limited) or public, per the projection. Returns `null` if the slot
+   * does not exist. Throws for a non-external slot (use `get()`/`response()`).
+   */
+  async url(slotName, opts) {
+    const { slots } = await this.loadSlots();
+    const slot = slots[slotName];
+    if (!slot) return null;
+    if (!slot.external) {
+      throw new NotFoundError(`Blob slot "${slotName}" is not external \u2014 url() is only for external fields`);
+    }
+    if (!this.objectStore) {
+      throw new NotFoundError(`Blob slot "${slotName}" is external but no objectStore is configured`);
+    }
+    return this.objectStore.objectUrl(slot.external.key, opts);
+  }
+  /**
+   * Build the backlink stamped onto an external object's metadata — the
+   * self-describing "secondary store" reference back to this record. See
+   * {@link BlobFieldPolicy.backlink}. Returns the `userMeta` to attach and, for
+   * `opaque-token`, the `token` to record on the slot.
+   */
+  async buildBacklink(slotName, mode) {
+    if (mode === "none") return {};
+    const ref2 = { vault: this.vault, collection: this.collection, record: this.recordId, field: slotName };
+    if (mode === "plain") {
+      return {
+        userMeta: {
+          "noydb-vault": ref2.vault,
+          "noydb-collection": ref2.collection,
+          "noydb-record": ref2.record,
+          "noydb-field": ref2.field
+        }
+      };
+    }
+    if (mode === "encrypted" && this.encrypted) {
+      const dek = await this.getDEK(BLOB_COLLECTION);
+      const { iv, data } = await encrypt(JSON.stringify(ref2), dek);
+      return { userMeta: { "noydb-backlink-enc": `${iv}.${data}` } };
+    }
+    const bytes = globalThis.crypto.getRandomValues(new Uint8Array(16));
+    const token = Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+    return { userMeta: { "noydb-backlink": token }, token };
+  }
+  /**
+   * Adopt an EXISTING object in the projection into this slot **without
+   * re-uploading** — used by import/bootstrap to anchor objects already in the
+   * bucket. Writes the external slot record (the catalog entry).
+   */
+  async adoptExternal(slotName, ref2) {
+    const uploaderUserId = this.userId;
+    await this.casUpdateSlots((slots) => {
+      slots[slotName] = {
+        eTag: "",
+        external: {
+          key: ref2.key,
+          ...ref2.contentType ? { contentType: ref2.contentType } : {},
+          ...ref2.public ? { public: true } : {},
+          ...ref2.backlink ? { backlink: ref2.backlink } : {},
+          ...ref2.meta ? { meta: ref2.meta } : {}
+        },
+        filename: slotName,
+        size: ref2.size ?? 0,
+        ...ref2.contentType ? { mimeType: ref2.contentType } : {},
+        uploadedAt: (/* @__PURE__ */ new Date()).toISOString(),
+        ...uploaderUserId !== void 0 ? { uploadedBy: uploaderUserId } : {}
+      };
+      return slots;
+    });
+  }
+  /**
+   * Merge derived metadata (video `duration`, image `width`/`height`, arbitrary
+   * metatags) into an external slot's secondary metadata store. Typically called
+   * from an AWS-side processing callback (MediaConvert / ffprobe / Rekognition)
+   * once it has probed the object. No-op for a missing or non-external slot.
+   */
+  async setExternalMeta(slotName, meta) {
+    await this.casUpdateSlots((slots) => {
+      const slot = slots[slotName];
+      if (!slot?.external) return null;
+      slots[slotName] = {
+        ...slot,
+        external: { ...slot.external, meta: { ...slot.external.meta, ...meta } }
+      };
+      return slots;
+    });
+  }
+  /**
+   * Read an external slot's synced derived metadata (the secondary store).
+   * Returns `null` for a missing or non-external slot, `{}` if none synced yet.
+   */
+  async externalMeta(slotName) {
+    const { slots } = await this.loadSlots();
+    const slot = slots[slotName];
+    if (!slot?.external) return null;
+    return slot.external.meta ?? {};
+  }
   /**
    * List all slot entries for this record.
    * Returns metadata only — no chunk data is loaded.
@@ -7672,12 +7846,19 @@ var BlobSet = class {
    */
   async delete(slotName) {
     let eTagToRelease;
+    let externalKeyToDelete;
     await this.casUpdateSlots((slots) => {
       if (!(slotName in slots)) return null;
-      eTagToRelease = slots[slotName].eTag;
+      const slot = slots[slotName];
+      if (slot.external) externalKeyToDelete = slot.external.key;
+      else eTagToRelease = slot.eTag;
       delete slots[slotName];
       return slots;
     });
+    if (externalKeyToDelete && this.objectStore) {
+      await this.objectStore.deleteObject(externalKeyToDelete).catch(() => {
+      });
+    }
     if (eTagToRelease) {
       await this.releaseRef(eTagToRelease, 1, false).catch(() => {
       });
@@ -7935,6 +8116,91 @@ async function plainSha256Hex(data) {
   return sha256Hex(data);
 }
 
+// src/blobs/object-projection.ts
+function memoryObjectProjection(opts = {}) {
+  const base = opts.baseUrl ?? "memory://objects";
+  const store = /* @__PURE__ */ new Map();
+  return {
+    name: "memory",
+    async putObject(key, bytes, o) {
+      store.set(key, {
+        bytes,
+        contentType: o.contentType,
+        public: o.public === true,
+        ...o.userMeta ? { userMeta: o.userMeta } : {}
+      });
+    },
+    async getObject(key) {
+      return store.get(key)?.bytes ?? null;
+    },
+    async deleteObject(key) {
+      store.delete(key);
+    },
+    async headObject(key) {
+      const e = store.get(key);
+      if (!e) return null;
+      return {
+        size: e.bytes.byteLength,
+        contentType: e.contentType,
+        ...e.userMeta ? { userMeta: e.userMeta } : {}
+      };
+    },
+    async objectUrl(key, o) {
+      const e = store.get(key);
+      if (e?.public) return `${base}/${key}`;
+      return `${base}/${key}?sig=memory&expires=${o?.expiresInSeconds ?? 900}`;
+    },
+    async putUrl(key, o) {
+      return `${base}/${key}?upload=memory&ct=${encodeURIComponent(o.contentType)}`;
+    },
+    async listPrefix(prefix) {
+      const out = [];
+      for (const [key, e] of store) {
+        if (!key.startsWith(prefix)) continue;
+        out.push({
+          key,
+          meta: { size: e.bytes.byteLength, contentType: e.contentType, ...e.userMeta ? { userMeta: e.userMeta } : {} }
+        });
+      }
+      return out;
+    }
+  };
+}
+
+// src/blobs/import-external.ts
+function defaultDeriveRecordId(key) {
+  const parts = key.split("/");
+  return parts.length >= 2 ? parts[parts.length - 2] ?? null : null;
+}
+async function importExternalObjects(args) {
+  const { collection, objectStore, field } = args;
+  const opts = args.options ?? {};
+  const derive = opts.deriveRecordId ?? defaultDeriveRecordId;
+  const makeRecord = opts.makeRecord ?? ((id) => ({ id }));
+  const objects = await objectStore.listPrefix(opts.prefix ?? "");
+  const recordIds = [];
+  let imported = 0;
+  let skipped = 0;
+  for (const { key, meta } of objects) {
+    const recordId4 = derive(key);
+    if (!recordId4) {
+      skipped++;
+      continue;
+    }
+    if (await collection.get(recordId4) == null) {
+      await collection.put(recordId4, makeRecord(recordId4));
+    }
+    await collection.blob(recordId4).adoptExternal(field, {
+      key,
+      ...meta.size !== void 0 ? { size: meta.size } : {},
+      ...meta.contentType ? { contentType: meta.contentType } : {}
+    });
+    recordIds.push(recordId4);
+    imported++;
+  }
+  return { imported, skipped, recordIds };
+}
+
 // src/store/bundle-store.ts
 init_errors();
 var BUNDLE_STORE_VERSION = 1;
@@ -8077,6 +8343,24 @@ function createBundleStore(factory) {
   return factory;
 }
 
+// src/debug.ts
+function readPlaintextRecord(envelope) {
+  if (envelope._iv !== "") {
+    throw new Error(
+      "readPlaintextRecord: envelope is encrypted (non-empty _iv) \u2014 decrypt via the vault, not this helper"
+    );
+  }
+  if (envelope._debug !== void 0) {
+    const record = {};
+    for (const [key, value] of Object.entries(envelope)) {
+      if (!key.startsWith("_")) record[key] = value;
+    }
+    return record;
+  }
+  if (!envelope._data) return null;
+  return JSON.parse(envelope._data);
+}
+
 // src/persisted-schemas/canonicalize.ts
 function canonicalize(value) {
   if (value === null || typeof value !== "object") {
@@ -9305,6 +9589,7 @@ init_constants();
 init_errors();
 init_errors();
 init_errors();
+init_errors();
 
 // src/bundle/format.ts
 var NOYDB_BUNDLE_MAGIC = new Uint8Array([78, 68, 66, 49]);
@@ -16629,6 +16914,8 @@ var Collection = class {
    * reaches the bundle.
    */
   blobStrategy;
+  objectStore;
+  blobFields;
   aggregateStrategy;
   crdtStrategy;
   historyStrategy;
@@ -16906,6 +17193,8 @@ var Collection = class {
     this.subsystemBus = opts.subsystemBus;
     this.activeTxId = opts.activeTxId;
     this.blobStrategy = opts.blobStrategy ?? NO_BLOBS;
+    this.objectStore = opts.objectStore;
+    this.blobFields = opts.blobFields;
     this.aggregateStrategy = opts.aggregateStrategy ?? NO_AGGREGATE;
     this.crdtStrategy = opts.crdtStrategy ?? NO_CRDT;
     this.historyStrategy = opts.historyStrategy ?? NO_HISTORY;
@@ -19046,7 +19335,10 @@ var Collection = class {
       getDEK: this.getDEK,
       encrypted: this.encrypted,
       userId: this.keyring.userId,
-      erasableBlobs: this.perRecordCek
+      erasableBlobs: this.perRecordCek,
+      debugPlaintext: this.keyring.debugPlaintext === true,
+      ...this.objectStore !== void 0 ? { objectStore: this.objectStore } : {},
+      ...this.blobFields !== void 0 ? { blobFields: this.blobFields } : {}
     });
   }
   /** Get all records as encrypted envelopes (for dump). */
@@ -19432,6 +19724,30 @@ var Collection = class {
    * path encrypts the body directly under the collection DEK — byte-identical
    * to pre-CEK behaviour, so non-adopting collections pay nothing.
    */
+  /**
+   * Build a debug-plaintext envelope: the record's own fields inlined as
+   * top-level keys beside the reserved `_`-metadata, with `_debug: 1` and an
+   * empty `_data`. Lets native store tooling read the record without
+   * unwrapping. Only reached for user collections under `debugPlaintext`
+   * (see {@link encryptRecord}). Rejects `_`-prefixed record fields, which
+   * would collide with the reserved metadata namespace.
+   */
+  buildDebugEnvelope(record, version) {
+    const rec = record;
+    for (const key of Object.keys(rec)) {
+      if (key.startsWith("_")) throw new DebugReservedFieldError(this.name, key);
+    }
+    return {
+      _noydb: NOYDB_FORMAT_VERSION,
+      _v: version,
+      _ts: (/* @__PURE__ */ new Date()).toISOString(),
+      _iv: "",
+      _data: "",
+      _by: this.keyring.userId,
+      _debug: NOYDB_FORMAT_VERSION,
+      ...rec
+    };
+  }
   async encryptJsonString(json, version, cek) {
     const by = this.keyring.userId;
     if (!this.encrypted) {
@@ -19469,6 +19785,9 @@ var Collection = class {
     };
   }
   async encryptRecord(record, version, cek) {
+    if (!this.encrypted && this.keyring.debugPlaintext === true && !this.name.startsWith("_")) {
+      return this.buildDebugEnvelope(record, version);
+    }
     const base = await this.encryptJsonString(JSON.stringify(record), version, cek);
     if (!this.deterministicFields || !this.encrypted) return base;
     const dek = await this.getDEK(this.name);
@@ -19809,7 +20128,16 @@ var Collection = class {
    */
   async decryptJsonString(envelope, id) {
     if (isTombstone(envelope, this.encrypted)) return null;
-    if (!this.encrypted) return envelope._data;
+    if (!this.encrypted) {
+      if (envelope._debug !== void 0) {
+        const rec = {};
+        for (const [key, value] of Object.entries(envelope)) {
+          if (!key.startsWith("_")) rec[key] = value;
+        }
+        return JSON.stringify(rec);
+      }
+      return envelope._data;
+    }
     const dek = await this.getDEK(this.name);
     if (envelope._cek !== void 0) {
       const cached = id !== void 0 ? this.cekCache?.get(id) : void 0;
@@ -21335,6 +21663,7 @@ var Vault = class {
    * call throws with a pointer at `@noy-db/hub/blobs`.
    */
   blobStrategy;
+  objectStore;
   /** Cold-storage archival strategy (the archive target store). */
   archiveStrategy;
   /** Per-collection record archival policies. Indexed by collection name. */
@@ -21580,6 +21909,7 @@ var Vault = class {
     this.onRegisterConflictResolver = opts.onRegisterConflictResolver;
     this.syncAdapter = opts.syncAdapter;
     this.blobStrategy = opts.blobStrategy;
+    this.objectStore = opts.objectStore;
     this.archiveStrategy = opts.archiveStrategy;
     this.indexStrategy = opts.indexStrategy;
     this.aggregateStrategy = opts.aggregateStrategy;
@@ -21763,6 +22093,8 @@ var Vault = class {
         // collection. `undefined` is intentionally preserved so the
         // Collection constructor uses its NO_BLOBS default.
         ...this.blobStrategy !== void 0 ? { blobStrategy: this.blobStrategy } : {},
+        ...this.objectStore !== void 0 ? { objectStore: this.objectStore } : {},
+        ...options?.blobFields !== void 0 ? { blobFields: options.blobFields } : {},
         ...this.indexStrategy !== void 0 ? { indexStrategy: this.indexStrategy } : {},
         ...this.aggregateStrategy !== void 0 ? { aggregateStrategy: this.aggregateStrategy } : {},
         ...this.crdtStrategy !== void 0 ? { crdtStrategy: this.crdtStrategy } : {},
@@ -25528,7 +25860,7 @@ var ROLE_RANK = {
   admin: 4,
   owner: 5
 };
-function createPlaintextKeyring(userId) {
+function createPlaintextKeyring(userId, debugPlaintext = false) {
   return {
     userId,
     displayName: userId,
@@ -25537,7 +25869,8 @@ function createPlaintextKeyring(userId) {
     deks: /* @__PURE__ */ new Map(),
     kek: null,
     salt: new Uint8Array(0),
-    authenticators: []
+    authenticators: [],
+    ...debugPlaintext ? { debugPlaintext } : {}
   };
 }
 var Noydb = class {
@@ -25614,6 +25947,14 @@ var Noydb = class {
   _translatorAuditLog = [];
   constructor(options) {
     this.options = options;
+    if (options.debugPlaintext === true && options.encrypt !== false) {
+      throw new DebugPlaintextError();
+    }
+    if (options.debugPlaintext === true) {
+      console.warn(
+        "[noydb] debugPlaintext is ON \u2014 records are stored UNENCRYPTED and laid out for native store inspection. NEVER use this for production or client data."
+      );
+    }
     this.txStrategy = options.txStrategy ?? NO_TX;
     this.forgetStrategy = options.forgetStrategy ?? NO_FORGET;
     this.sessionStrategy = options.sessionStrategy ?? NO_SESSION;
@@ -25889,6 +26230,7 @@ var Noydb = class {
       syncAdapter: targets.length > 0 ? targets[0].store : void 0,
       historyConfig: this.options.history,
       ...this.options.blobStrategy !== void 0 ? { blobStrategy: this.options.blobStrategy } : {},
+      ...this.options.objectStore !== void 0 ? { objectStore: this.options.objectStore } : {},
       ...this.options.archiveStrategy !== void 0 ? { archiveStrategy: this.options.archiveStrategy } : {},
       ...this.options.indexStrategy !== void 0 ? { indexStrategy: this.options.indexStrategy } : {},
       ...this.options.aggregateStrategy !== void 0 ? { aggregateStrategy: this.options.aggregateStrategy } : {},
@@ -25935,7 +26277,7 @@ var Noydb = class {
     const cached = this.vaultCache.get(name);
     if (cached) return cached;
     if (this.options.encrypt === false) {
-      const keyring2 = createPlaintextKeyring(this.options.user);
+      const keyring2 = createPlaintextKeyring(this.options.user, this.options.debugPlaintext === true);
       const comp2 = new Vault({
         adapter: this.options.store,
         name,
@@ -25945,6 +26287,7 @@ var Noydb = class {
         emitter: this.emitter,
         historyConfig: this.options.history,
         ...this.options.blobStrategy !== void 0 ? { blobStrategy: this.options.blobStrategy } : {},
+        ...this.options.objectStore !== void 0 ? { objectStore: this.options.objectStore } : {},
         ...this.options.archiveStrategy !== void 0 ? { archiveStrategy: this.options.archiveStrategy } : {},
         ...this.options.indexStrategy !== void 0 ? { indexStrategy: this.options.indexStrategy } : {},
         ...this.options.aggregateStrategy !== void 0 ? { aggregateStrategy: this.options.aggregateStrategy } : {},
@@ -25976,6 +26319,7 @@ var Noydb = class {
       encrypted: true,
       historyConfig: this.options.history,
       ...this.options.blobStrategy !== void 0 ? { blobStrategy: this.options.blobStrategy } : {},
+      ...this.options.objectStore !== void 0 ? { objectStore: this.options.objectStore } : {},
       ...this.options.archiveStrategy !== void 0 ? { archiveStrategy: this.options.archiveStrategy } : {},
       ...this.options.indexStrategy !== void 0 ? { indexStrategy: this.options.indexStrategy } : {},
       ...this.options.aggregateStrategy !== void 0 ? { aggregateStrategy: this.options.aggregateStrategy } : {},
@@ -27676,7 +28020,7 @@ var Noydb = class {
    */
   async getKeyringInternal(vault, opts = { create: true }) {
     if (this.options.encrypt === false) {
-      return createPlaintextKeyring(this.options.user);
+      return createPlaintextKeyring(this.options.user, this.options.debugPlaintext === true);
     }
     const cached = this.keyringCache.get(vault);
     if (cached) return cached;
@@ -29757,6 +30101,8 @@ function shortJSON(value) {
   DIRECTORY_RECORD_ID,
   DanglingReferenceError,
   DataResidencyError,
+  DebugPlaintextError,
+  DebugReservedFieldError,
   DecryptionError,
   DelegationTargetMissingError,
   DerivationCapExceededError,
@@ -29985,6 +30331,7 @@ function shortJSON(value) {
   hashEntry,
   i18nText,
   immutableGuard,
+  importExternalObjects,
   inferScripts,
   isDevUnlockActive,
   isDictCollectionName,
@@ -30022,6 +30369,7 @@ function shortJSON(value) {
   lockSchema,
   magicLinkGrantRecordId,
   max,
+  memoryObjectProjection,
   mergeCrdtStates,
   mergePolicy,
   min,
@@ -30046,6 +30394,7 @@ function shortJSON(value) {
   readNoydbBundleHeader,
   readNoydbBundlePublicEnvelope,
   readPath,
+  readPlaintextRecord,
   readPublicEnvelope,
   readUserVisibility,
   recoverUser,