@noy-db/hub 0.2.0-pre.19 → 0.2.0-pre.20

package/dist/{chunk-KYGGXXT6.js → chunk-7PH4OPBZ.js}

@@ -7,10 +7,10 @@ import {
 import {
   TxContext,
   revertExecuted
-} from "./chunk-V3VIRTTE.js";
+} from "./chunk-IY24WS2P.js";
 import {
   OverlayedCollection
-} from "./chunk-X7FJMKT3.js";
+} from "./chunk-MBXKRHSS.js";
 import {
   NO_AGGREGATE,
   Query,
@@ -20,36 +20,36 @@ import {
   decodeMoneyFields,
   quantizeMoneyFields,
   validateMoneyFieldPaths
-} from "./chunk-3Q2AOPLT.js";
+} from "./chunk-NV4IHBZS.js";
 import {
   EXPORT_AUDIT_COLLECTION,
   createExportBlobsHandle,
   runCompaction
-} from "./chunk-U7JNBSS3.js";
+} from "./chunk-2XA2ZML4.js";
 import {
   LazyQuery,
   decodeIdxId,
   encodeIdxId
-} from "./chunk-B6E5IRPJ.js";
+} from "./chunk-3HNKR65T.js";
 import {
   canonicalGroupKey
-} from "./chunk-OBMYMKGO.js";
+} from "./chunk-JYNH4FIM.js";
 import {
   readPath
-} from "./chunk-LSIIPKYT.js";
+} from "./chunk-U2XSUCDF.js";
 import {
   SCHEMAS_COLLECTION,
   loadPersistedSchema,
   resolveManagedSecret,
   savePersistedSchema,
   saveSealedPassphrase
-} from "./chunk-VNUE6FHP.js";
+} from "./chunk-C6W5KVDV.js";
 import {
   loadPublicEnvelope,
   readPublicEnvelope,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-E66DSTJP.js";
+} from "./chunk-JOK73NDT.js";
 import {
   buildTombstone,
   isTombstone,
@@ -58,19 +58,19 @@ import {
   rewrapBodyToDek,
   rotateRecordCek,
   sealRecordToHost
-} from "./chunk-GKQAU52M.js";
+} from "./chunk-BZW5IL43.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-YZE6C3TQ.js";
+} from "./chunk-I3IYTUUI.js";
 import {
   isDictCollectionName,
   isStaticDictDescriptor
-} from "./chunk-H42KZXNV.js";
+} from "./chunk-O5XKZCUD.js";
 import {
   getAtPath,
   resolvePolicy,
   setAtPathInPlace
-} from "./chunk-VEIVAYJ7.js";
+} from "./chunk-TNH5SLCD.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
@@ -92,11 +92,11 @@ import {
   saveShamirRecoveryEntries,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "./chunk-S22UOMHM.js";
+} from "./chunk-HYJMAV53.js";
 import {
   assertTierAccess,
   dekKey
-} from "./chunk-FBLAWK6A.js";
+} from "./chunk-F5GWNSE2.js";
 import {
   USER_ENVELOPE_COLLECTION,
   assertKeyringOpenAllowed,
@@ -121,7 +121,7 @@ import {
   rotateKeys,
   saveUserEnvelope,
   updateKeyringIdentity
-} from "./chunk-M3FPNTO2.js";
+} from "./chunk-FRRJIUSI.js";
 import {
   INDEXED_STORE_POLICY
 } from "./chunk-2QR2PQTT.js";
@@ -131,7 +131,7 @@ import {
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
-} from "./chunk-YX333DPS.js";
+} from "./chunk-JDCPRJVS.js";
 import {
   sha256Hex as sha256Hex2
 } from "./chunk-PDVP3C2I.js";
@@ -143,11 +143,11 @@ import {
   readDottedPath,
   rebuildSubjectIndex,
   removeSubjectRef
-} from "./chunk-KNKNOJFS.js";
+} from "./chunk-CQYEDODS.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION
-} from "./chunk-SHIUFIPW.js";
+} from "./chunk-TA6HPKWQ.js";
 import {
   decrypt,
   encrypt,
@@ -155,13 +155,15 @@ import {
   sha256Hex,
   unwrapCek,
   wrapCek
-} from "./chunk-OKOKPYWH.js";
+} from "./chunk-37VGJM3T.js";
 import {
   AlreadyElevatedError,
   AttestationError,
   BackupCorruptedError,
   BackupLedgerError,
   ConflictError,
+  DebugPlaintextError,
+  DebugReservedFieldError,
   DerivationCapExceededError,
   ElevationExpiredError,
   ExportCapabilityError,
@@ -194,7 +196,7 @@ import {
   UnsupportedIndexOptionError,
   ValidationError,
   VaultTemplateNotFoundError
-} from "./chunk-DJF3FXW5.js";
+} from "./chunk-OTWT6BAJ.js";
 
 // src/policy/storage.ts
 var META_COLLECTION = "_meta";
@@ -908,7 +910,7 @@ async function resolveStaleOnRead(accessor, outputCollection, id) {
     }
     const sourceWithId = { ...source, id };
     if (DerivationExecutor === null) {
-      ({ DerivationExecutor } = await import("./executor-OKFLQCDW.js"));
+      ({ DerivationExecutor } = await import("./executor-4IEW4KG5.js"));
     }
     const ctx = { vault: accessor.getReadOnlyFacade() };
     const result = await DerivationExecutor.run(spec, sourceWithId, 0, strategyHash, ctx);
@@ -990,6 +992,8 @@ var Collection = class {
    * reaches the bundle.
    */
   blobStrategy;
+  objectStore;
+  blobFields;
   aggregateStrategy;
   crdtStrategy;
   historyStrategy;
@@ -1267,6 +1271,8 @@ var Collection = class {
     this.subsystemBus = opts.subsystemBus;
     this.activeTxId = opts.activeTxId;
     this.blobStrategy = opts.blobStrategy ?? NO_BLOBS;
+    this.objectStore = opts.objectStore;
+    this.blobFields = opts.blobFields;
     this.aggregateStrategy = opts.aggregateStrategy ?? NO_AGGREGATE;
     this.crdtStrategy = opts.crdtStrategy ?? NO_CRDT;
     this.historyStrategy = opts.historyStrategy ?? NO_HISTORY;
@@ -1453,7 +1459,7 @@ var Collection = class {
       }
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-NTEV5SLX.js");
+      const { resolveStaleMVOnRead } = await import("./stale-CPESGAPL.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name);
     }
     let record;
@@ -1863,7 +1869,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-44R5CUS2.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-KYJCJCIN.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -1872,7 +1878,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-NTEV5SLX.js");
+          staleHelpers = await import("./stale-CPESGAPL.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -2046,7 +2052,7 @@ var Collection = class {
         continue;
       }
       if (DerivationExecutor === null) {
-        ({ DerivationExecutor } = await import("./executor-OKFLQCDW.js"));
+        ({ DerivationExecutor } = await import("./executor-4IEW4KG5.js"));
       }
       for (const run of runs) {
         const ctx = { vault: this.derivationSource.getReadOnlyFacade() };
@@ -2065,7 +2071,7 @@ var Collection = class {
           const outputCollection = this.derivationSource.getCollection(outSpec.collection);
           const txCtx = this.derivationSource.getActiveTxContext();
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-DCQWJQ6S.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-YXNAEZ33.js");
             const prior = await loadFanoutSidecar(
               this.adapter,
               this.vault,
@@ -2428,7 +2434,7 @@ var Collection = class {
       for (const [outputKey, outSpec] of Object.entries(spec.outputs)) {
         if (outSpec.shape !== "array") continue;
         if (helpers === null) {
-          helpers = await import("./fanout-sidecar-DCQWJQ6S.js");
+          helpers = await import("./fanout-sidecar-YXNAEZ33.js");
         }
         const sidecar = await helpers.loadFanoutSidecar(
           this.adapter,
@@ -2468,7 +2474,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-44R5CUS2.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-KYJCJCIN.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -2477,7 +2483,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-NTEV5SLX.js");
+          staleHelpers = await import("./stale-CPESGAPL.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -2500,7 +2506,7 @@ var Collection = class {
       );
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-NTEV5SLX.js");
+      const { resolveStaleMVOnRead } = await import("./stale-CPESGAPL.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name);
     }
     await this.ensureHydrated();
@@ -3407,7 +3413,10 @@ var Collection = class {
       getDEK: this.getDEK,
       encrypted: this.encrypted,
       userId: this.keyring.userId,
-      erasableBlobs: this.perRecordCek
+      erasableBlobs: this.perRecordCek,
+      debugPlaintext: this.keyring.debugPlaintext === true,
+      ...this.objectStore !== void 0 ? { objectStore: this.objectStore } : {},
+      ...this.blobFields !== void 0 ? { blobFields: this.blobFields } : {}
     });
   }
   /** Get all records as encrypted envelopes (for dump). */
@@ -3793,6 +3802,30 @@ var Collection = class {
    * path encrypts the body directly under the collection DEK — byte-identical
    * to pre-CEK behaviour, so non-adopting collections pay nothing.
    */
+  /**
+   * Build a debug-plaintext envelope: the record's own fields inlined as
+   * top-level keys beside the reserved `_`-metadata, with `_debug: 1` and an
+   * empty `_data`. Lets native store tooling read the record without
+   * unwrapping. Only reached for user collections under `debugPlaintext`
+   * (see {@link encryptRecord}). Rejects `_`-prefixed record fields, which
+   * would collide with the reserved metadata namespace.
+   */
+  buildDebugEnvelope(record, version) {
+    const rec = record;
+    for (const key of Object.keys(rec)) {
+      if (key.startsWith("_")) throw new DebugReservedFieldError(this.name, key);
+    }
+    return {
+      _noydb: NOYDB_FORMAT_VERSION,
+      _v: version,
+      _ts: (/* @__PURE__ */ new Date()).toISOString(),
+      _iv: "",
+      _data: "",
+      _by: this.keyring.userId,
+      _debug: NOYDB_FORMAT_VERSION,
+      ...rec
+    };
+  }
   async encryptJsonString(json, version, cek) {
     const by = this.keyring.userId;
     if (!this.encrypted) {
@@ -3830,6 +3863,9 @@ var Collection = class {
     };
   }
   async encryptRecord(record, version, cek) {
+    if (!this.encrypted && this.keyring.debugPlaintext === true && !this.name.startsWith("_")) {
+      return this.buildDebugEnvelope(record, version);
+    }
     const base = await this.encryptJsonString(JSON.stringify(record), version, cek);
     if (!this.deterministicFields || !this.encrypted) return base;
     const dek = await this.getDEK(this.name);
@@ -4170,7 +4206,16 @@ var Collection = class {
    */
   async decryptJsonString(envelope, id) {
     if (isTombstone(envelope, this.encrypted)) return null;
-    if (!this.encrypted) return envelope._data;
+    if (!this.encrypted) {
+      if (envelope._debug !== void 0) {
+        const rec = {};
+        for (const [key, value] of Object.entries(envelope)) {
+          if (!key.startsWith("_")) rec[key] = value;
+        }
+        return JSON.stringify(rec);
+      }
+      return envelope._data;
+    }
     const dek = await this.getDEK(this.name);
     if (envelope._cek !== void 0) {
       const cached = id !== void 0 ? this.cekCache?.get(id) : void 0;
@@ -5907,6 +5952,7 @@ var Vault = class {
    * call throws with a pointer at `@noy-db/hub/blobs`.
    */
   blobStrategy;
+  objectStore;
   /** Cold-storage archival strategy (the archive target store). */
   archiveStrategy;
   /** Per-collection record archival policies. Indexed by collection name. */
@@ -6152,6 +6198,7 @@ var Vault = class {
     this.onRegisterConflictResolver = opts.onRegisterConflictResolver;
     this.syncAdapter = opts.syncAdapter;
     this.blobStrategy = opts.blobStrategy;
+    this.objectStore = opts.objectStore;
     this.archiveStrategy = opts.archiveStrategy;
     this.indexStrategy = opts.indexStrategy;
     this.aggregateStrategy = opts.aggregateStrategy;
@@ -6335,6 +6382,8 @@ var Vault = class {
         // collection. `undefined` is intentionally preserved so the
         // Collection constructor uses its NO_BLOBS default.
         ...this.blobStrategy !== void 0 ? { blobStrategy: this.blobStrategy } : {},
+        ...this.objectStore !== void 0 ? { objectStore: this.objectStore } : {},
+        ...options?.blobFields !== void 0 ? { blobFields: options.blobFields } : {},
         ...this.indexStrategy !== void 0 ? { indexStrategy: this.indexStrategy } : {},
         ...this.aggregateStrategy !== void 0 ? { aggregateStrategy: this.aggregateStrategy } : {},
         ...this.crdtStrategy !== void 0 ? { crdtStrategy: this.crdtStrategy } : {},
@@ -7085,12 +7134,12 @@ var Vault = class {
     if (!fieldSchema) {
       throw new AttestationError(`issueAttestation: collection '${collectionName}' has no attestation field-schema. Declare it via vault.collection('${collectionName}', { attestation: { fields: [...] } }).`);
     }
-    const { issueAttestationCore } = await import("./issue-EPA2PSWP.js");
+    const { issueAttestationCore } = await import("./issue-JXC6T2QR.js");
     const out = await issueAttestationCore(this.makeIssueContext(), { collection: collectionName, id, fieldSchema });
     return { docId: out.docId, qr: out.qr, keyId: out.keyId, publicKeyB64: out.publicKeyB64 };
   }
   async getDocumentSigningPublicKey() {
-    const { loadSigner, loadOrCreateSigner } = await import("./signer-UNWOUJAK.js");
+    const { loadSigner, loadOrCreateSigner } = await import("./signer-I6YARZQA.js");
     const existing = await loadSigner(this.adapter, this.name, this.getDEK);
     if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
     if (this.keyring.role !== "owner") {
@@ -7116,19 +7165,19 @@ var Vault = class {
     };
   }
   async revokeAttestation(docId) {
-    const { revokeDocCore } = await import("./revoke-IFLXEZA5.js");
+    const { revokeDocCore } = await import("./revoke-5IEK22KT.js");
     await revokeDocCore(this.makeRevokeContext(), docId);
   }
   async unrevokeAttestation(docId) {
-    const { unrevokeDocCore } = await import("./revoke-IFLXEZA5.js");
+    const { unrevokeDocCore } = await import("./revoke-5IEK22KT.js");
     await unrevokeDocCore(this.makeRevokeContext(), docId);
   }
   async getRevokedDocIds() {
-    const { getRevokedDocIdsCore } = await import("./revoke-IFLXEZA5.js");
+    const { getRevokedDocIdsCore } = await import("./revoke-5IEK22KT.js");
     return getRevokedDocIdsCore(this.makeRevokeContext());
   }
   async publishRevocationList() {
-    const { publishRevocationListCore } = await import("./revoke-IFLXEZA5.js");
+    const { publishRevocationListCore } = await import("./revoke-5IEK22KT.js");
     return publishRevocationListCore(this.makeRevokeContext());
   }
   makeRevokeContext() {
@@ -7787,7 +7836,7 @@ var Vault = class {
   async _initDerivations(handles) {
     if (handles.length === 0) return;
     const [{ DerivationRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-ERNAMRDE.js"),
+      import("./registry-ATRHOG5B.js"),
       import("./read-only-facade-EX6WZZBP.js")
     ]);
     const registry = new DerivationRegistry();
@@ -7818,7 +7867,7 @@ var Vault = class {
    */
   async _initMaterializedViews(handles) {
     if (handles.length === 0) return;
-    const { MaterializedViewRegistry } = await import("./registry-RDPTFXQ7.js");
+    const { MaterializedViewRegistry } = await import("./registry-NWHOLD5M.js");
     const registry = new MaterializedViewRegistry();
     this.materializedViewRegistry = registry;
     const db = this;
@@ -7842,7 +7891,7 @@ var Vault = class {
    */
   async _initOverlayedViews(handles) {
     if (handles.length === 0) return;
-    const { OverlayedViewRegistry } = await import("./registry-EXTHSXQW.js");
+    const { OverlayedViewRegistry } = await import("./registry-LEHB26TY.js");
     const registry = new OverlayedViewRegistry();
     const mvRegistry = this.materializedViewRegistry;
     const overlayNames = /* @__PURE__ */ new Set();
@@ -7889,13 +7938,13 @@ var Vault = class {
     if (!reg) {
       throw new Error(`refreshView: no MV registered with name "${name}"`);
     }
-    const { MaterializedViewExecutor } = await import("./executor-44R5CUS2.js");
+    const { MaterializedViewExecutor } = await import("./executor-KYJCJCIN.js");
     const result = await MaterializedViewExecutor.refresh(reg, {
       getCollection: (n) => this.collection(n),
       getActiveTxContext: () => this.noydb._activeTxContextOrNull,
       getQueryContext: () => this
     });
-    const { clearMVStale } = await import("./stale-NTEV5SLX.js");
+    const { clearMVStale } = await import("./stale-CPESGAPL.js");
     clearMVStale(registry, name);
     return result;
   }
@@ -7911,7 +7960,7 @@ var Vault = class {
     if (registry === null) return { derived: 0, failed: 0 };
     const strategies = registry.strategiesForSource(sourceCollection);
     if (strategies.length === 0) return { derived: 0, failed: 0 };
-    const { DerivationExecutor } = await import("./executor-OKFLQCDW.js");
+    const { DerivationExecutor } = await import("./executor-4IEW4KG5.js");
     const sourceColl = this.collection(sourceCollection);
     const records = await sourceColl.list();
     const ctx = { vault: this.derivationFacade ?? new (await import("./read-only-facade-EX6WZZBP.js")).ReadOnlyVaultFacade(this, "derivation") };
@@ -7936,7 +7985,7 @@ var Vault = class {
           if (!outSpec) continue;
           const outputColl = this.collection(outSpec.collection);
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-DCQWJQ6S.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-YXNAEZ33.js");
             const prior = await loadFanoutSidecar(this.adapter, this.name, spec.source, id, key);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -8158,7 +8207,7 @@ var Vault = class {
    * collection.
    */
   async delegate(opts) {
-    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-5HON72PV.js");
+    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-DP4COTXB.js");
     if (!this.keyring.kek) {
       throw new ValidationError(
         "issueDelegation: keyring.kek is null \u2014 issuing a delegation requires a tier-1 unlock. Re-authenticate at tier 1 (passphrase) first."
@@ -8180,7 +8229,7 @@ var Vault = class {
    * if the id does not exist.
    */
   async revokeDelegation(id) {
-    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-5HON72PV.js");
+    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-DP4COTXB.js");
     await revokeDelegation(this.adapter, this.name, id);
     void DELEGATIONS_COLLECTION;
   }
@@ -8649,7 +8698,7 @@ var Vault = class {
    * @see docs/subsystems/public-envelope.md
    */
   async getPublicEnvelope(opts = {}) {
-    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-AGU6SS4Z.js");
+    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-5XRTUNKF.js");
     return readPublicEnvelope2(this.adapter, this.name, opts);
   }
   /**
@@ -10141,7 +10190,7 @@ var ROLE_RANK = {
   admin: 4,
   owner: 5
 };
-function createPlaintextKeyring(userId) {
+function createPlaintextKeyring(userId, debugPlaintext = false) {
   return {
     userId,
     displayName: userId,
@@ -10150,7 +10199,8 @@ function createPlaintextKeyring(userId) {
     deks: /* @__PURE__ */ new Map(),
     kek: null,
     salt: new Uint8Array(0),
-    authenticators: []
+    authenticators: [],
+    ...debugPlaintext ? { debugPlaintext } : {}
   };
 }
 var Noydb = class {
@@ -10227,6 +10277,14 @@ var Noydb = class {
   _translatorAuditLog = [];
   constructor(options) {
     this.options = options;
+    if (options.debugPlaintext === true && options.encrypt !== false) {
+      throw new DebugPlaintextError();
+    }
+    if (options.debugPlaintext === true) {
+      console.warn(
+        "[noydb] debugPlaintext is ON \u2014 records are stored UNENCRYPTED and laid out for native store inspection. NEVER use this for production or client data."
+      );
+    }
     this.txStrategy = options.txStrategy ?? NO_TX;
     this.forgetStrategy = options.forgetStrategy ?? NO_FORGET;
     this.sessionStrategy = options.sessionStrategy ?? NO_SESSION;
@@ -10321,7 +10379,7 @@ var Noydb = class {
       if (!facade) return;
       const ctx = { existing, vault: facade, userId: e.userId, role: e.role };
       await registry.runChecks(e.collection, incoming, ctx);
-      const { GuardExecutor } = await import("./executor-AOACUK7Z.js");
+      const { GuardExecutor } = await import("./executor-W7VIBOBZ.js");
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, e.docId, existing, incoming, e.computedFieldNames);
       }
@@ -10502,6 +10560,7 @@ var Noydb = class {
       syncAdapter: targets.length > 0 ? targets[0].store : void 0,
       historyConfig: this.options.history,
       ...this.options.blobStrategy !== void 0 ? { blobStrategy: this.options.blobStrategy } : {},
+      ...this.options.objectStore !== void 0 ? { objectStore: this.options.objectStore } : {},
       ...this.options.archiveStrategy !== void 0 ? { archiveStrategy: this.options.archiveStrategy } : {},
       ...this.options.indexStrategy !== void 0 ? { indexStrategy: this.options.indexStrategy } : {},
       ...this.options.aggregateStrategy !== void 0 ? { aggregateStrategy: this.options.aggregateStrategy } : {},
@@ -10548,7 +10607,7 @@ var Noydb = class {
     const cached = this.vaultCache.get(name);
     if (cached) return cached;
     if (this.options.encrypt === false) {
-      const keyring2 = createPlaintextKeyring(this.options.user);
+      const keyring2 = createPlaintextKeyring(this.options.user, this.options.debugPlaintext === true);
       const comp2 = new Vault({
         adapter: this.options.store,
         name,
@@ -10558,6 +10617,7 @@ var Noydb = class {
         emitter: this.emitter,
         historyConfig: this.options.history,
         ...this.options.blobStrategy !== void 0 ? { blobStrategy: this.options.blobStrategy } : {},
+        ...this.options.objectStore !== void 0 ? { objectStore: this.options.objectStore } : {},
         ...this.options.archiveStrategy !== void 0 ? { archiveStrategy: this.options.archiveStrategy } : {},
         ...this.options.indexStrategy !== void 0 ? { indexStrategy: this.options.indexStrategy } : {},
         ...this.options.aggregateStrategy !== void 0 ? { aggregateStrategy: this.options.aggregateStrategy } : {},
@@ -10589,6 +10649,7 @@ var Noydb = class {
       encrypted: true,
       historyConfig: this.options.history,
       ...this.options.blobStrategy !== void 0 ? { blobStrategy: this.options.blobStrategy } : {},
+      ...this.options.objectStore !== void 0 ? { objectStore: this.options.objectStore } : {},
       ...this.options.archiveStrategy !== void 0 ? { archiveStrategy: this.options.archiveStrategy } : {},
       ...this.options.indexStrategy !== void 0 ? { indexStrategy: this.options.indexStrategy } : {},
       ...this.options.aggregateStrategy !== void 0 ? { aggregateStrategy: this.options.aggregateStrategy } : {},
@@ -10922,8 +10983,8 @@ var Noydb = class {
     if (name === STATE_VAULT_NAME) throw new ReservedVaultNameError(name);
     const template = this.vaultTemplates.get(opts.sharding.vaultTemplate);
     if (!template) throw new VaultTemplateNotFoundError(opts.sharding.vaultTemplate);
-    const { VaultGroup } = await import("./vault-group-27EV7KB4.js");
-    const { StateManagementVault } = await import("./state-vault-TUTFRTOA.js");
+    const { VaultGroup } = await import("./vault-group-BB246VIM.js");
+    const { StateManagementVault } = await import("./state-vault-JR3CFGNP.js");
     const stateVault = opts.registry ? void 0 : await StateManagementVault.open(this);
     const registry = opts.registry ?? stateVault.registry;
     const group = new VaultGroup(this, name, registry, opts.sharding, template, opts.migrateOnOpen ?? false);
@@ -10950,7 +11011,7 @@ var Noydb = class {
    */
   async openStateManagementVault() {
     if (this.closed) throw new ValidationError("Instance is closed");
-    const { StateManagementVault } = await import("./state-vault-TUTFRTOA.js");
+    const { StateManagementVault } = await import("./state-vault-JR3CFGNP.js");
     return StateManagementVault.open(this);
   }
   /**
@@ -12289,7 +12350,7 @@ var Noydb = class {
    */
   async getKeyringInternal(vault, opts = { create: true }) {
     if (this.options.encrypt === false) {
-      return createPlaintextKeyring(this.options.user);
+      return createPlaintextKeyring(this.options.user, this.options.debugPlaintext === true);
     }
     const cached = this.keyringCache.get(vault);
     if (cached) return cached;
@@ -12508,4 +12569,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-KYGGXXT6.js.map
+//# sourceMappingURL=chunk-7PH4OPBZ.js.map