@noy-db/hub 0.3.0-pre.8 → 0.3.0

package/dist/via/i18n/dictionary.d.ts

@@ -0,0 +1,200 @@
+/**
+ * _dict_* reserved collections + dictKey schema descriptor —
+ *
+ * Stores bounded enum-like field dictionaries as reserved encrypted
+ * collections (`_dict_<name>/`) within a vault. Each dictionary
+ * entry maps a stable key (e.g. `'paid'`) to a locale → label record
+ * (e.g. `{ en: 'Paid', th: 'ชำระแล้ว' }`).
+ *
+ * Design decisions
+ * ────────────────
+ *
+ * **Why reserved collections, not a separate store?**
+ * Same answer as `_sync_credentials`: the compartment's existing
+ * encryption stack is exactly right. Dictionaries are encrypted under the
+ * same vault DEK, inherit ACL, ledger, and backup/restore for free.
+ *
+ * **One collection per dictionary, not one collection with namespaces.**
+ * Each `_dict_<name>/` collection holds entries `{ id: key, labels: {...} }`.
+ * This composes with `ref()` naturally (a dictKey IS a ref to the dict
+ * collection), and means the query DSL works over dictionary entries
+ * without any special-casing.
+ *
+ * **dictKey() is a descriptor, not a Zod type.**
+ * The descriptor pattern matches `ref()`: declare NOYDB-specific metadata
+ * in the collection options alongside `refs`. TypeScript inference comes
+ * from the descriptor's generic parameter, not from Zod internals.
+ *
+ * API:
+ *   `dictKey(name, keys?)` — returns a DictKeyDescriptor
+ *   `vault.dictionary(name)` — returns a DictionaryHandle
+ *   `DictionaryHandle.put/putAll/get/delete/rename/list` — CRUD
+ *
+ * The storage engine (`DictionaryHandle`, `DictEntry`, `DictionaryOptions`,
+ * `DICT_COLLECTION_PREFIX`, `dictCollectionName`) moved to
+ * `via/lookup/handle.ts` (#650 Task 1 — via-lookup extraction, phase
+ * D of the Via port) and is renamed `LookupHandle` there; re-exported here
+ * under the original names for one release so existing importers of this
+ * module compile unchanged. This file keeps only the descriptor factories
+ * (`dictKey`/`staticDict`), which are locale/i18n-coupled and stay put.
+ */
+import type { OnMissingPolicy } from './policy.js';
+export { isDictCollectionName } from '../../port/with/i18n-strategy.js';
+export { DictionaryHandle, DICT_COLLECTION_PREFIX, dictCollectionName, type DictEntry, type DictionaryOptions, } from '../lookup/handle.js';
+/**
+ * Descriptor returned by `dictKey()`. Attach to the collection's
+ * `dictKeyFields` option to declare which fields are dictionary-backed:
+ *
+ * ```ts
+ * const invoices = company.collection<Invoice>('invoices', {
+ *   dictKeyFields: {
+ *     status: dictKey('status', ['draft', 'open', 'paid'] as const),
+ *   },
+ * })
+ * ```
+ *
+ * The generic parameter `Keys` narrows the TypeScript type of the field
+ * to a literal union; the runtime value of `keys` is used by `put()`
+ * validation to reject unknown keys when a key set is declared.
+ */
+export interface DictKeyDescriptor<Keys extends string = string> {
+    readonly _noydbDictKey: true;
+    /** Via port brand marker (#623 Task 9) — dictKey shares the i18n binding brand. */
+    readonly _viaBrand: 'i18n';
+    /** Which dictionary this field references. */
+    readonly name: string;
+    /** Declared valid keys. When set, `put()` rejects keys not in this set. */
+    readonly keys: readonly Keys[] | undefined;
+    /**
+     * What to do when a label is missing for the resolved locale. Mirrors
+     * `i18nText`'s `onMissing`. Default behavior (when unset) preserves the
+     * legacy contract: a missing label is omitted (scalar) or `null`
+     * (array element) — i.e. `'null'`. Set `'substitute'` to walk the
+     * declared `substitute` chain, or `'throw'` to raise.
+     */
+    readonly onMissing?: OnMissingPolicy;
+    /** Ordered preferred-substitute locales for label resolution. */
+    readonly substitute?: readonly string[];
+    /**
+     * Optional inline display labels (value → label map). A SYNC display
+     * fallback for `describe()` when async `dictLabels` (from `_dict_`) are
+     * not resolved. The async path still wins when available.
+     */
+    readonly labels?: Record<string, string>;
+}
+/**
+ * Create a `DictKeyDescriptor` for a dictionary-backed enum field.
+ *
+ * @param name        The dictionary name (corresponds to `_dict_<name>` collection).
+ * @param keysOrMap   Either:
+ *   - An `as const` array of valid key literals — narrows the TypeScript type
+ *     to a literal union and enables put-time validation.
+ *   - A **value→label map** (`{ draft: 'Draft', paid: 'Paid' }`) — keys are
+ *     inferred from the map, and the labels are stored as inline display
+ *     defaults surfaced by `describe()` without a store read.
+ * @param opts        `{ labels?, onMissing?, substitute? }` when the array form
+ *                    is used; `opts.labels` provides inline display defaults for
+ *                    specific keys (same semantics as the map form, but
+ *                    explicit key order from the array is preserved).
+ *
+ * @example
+ * ```ts
+ * // array form (original):
+ * dictKey('status', ['draft', 'open', 'paid'] as const)
+ *
+ * // value→label map form (keys inferred, inline labels for describe()):
+ * dictKey('status', { draft: 'Draft', open: 'Open', paid: 'Paid' })
+ *
+ * // array + opts.labels (preserves explicit order, partial labels OK):
+ * dictKey('status', ['draft', 'open', 'paid'] as const, { labels: { paid: 'Paid' } })
+ * ```
+ */
+export declare function dictKey<Keys extends string>(name: string, keysOrMap?: readonly Keys[] | Record<Keys, string>, opts?: {
+    onMissing?: OnMissingPolicy;
+    substitute?: readonly string[];
+    labels?: Record<string, string>;
+}): DictKeyDescriptor<Keys>;
+export { isDictKeyDescriptor } from '../../port/with/i18n-strategy.js';
+/**
+ * Descriptor returned by `staticDict()`. A sibling to {@link DictKeyDescriptor}
+ * for **closed, defined-in-code, identical-across-vaults** enums (honorific,
+ * civil-status, gender, religion, ContactTitle, status…).
+ *
+ * Unlike `dictKey`, the labels are supplied **at registration in code** and
+ * resolved through the *same* label machinery, but with **no `_dict_*`
+ * per-vault encrypted copy** and **no `rename()`**. The record stores only
+ * the **code**; a static dict has no mutation surface.
+ *
+ * **Hybrid resolution.** Because a static dict is pure code with no
+ * vault-locale dependency, it can — via a configured `displayLocale` — emit a
+ * `<field>Label` even under a **locale-less read** (the property a locale-less
+ * consumer needs and `dictKey` cannot provide). When a locale *is* active it
+ * behaves exactly like `dictKey` (honoring `onMissing`/`substitute`).
+ *
+ * ```ts
+ * const workers = vault.collection<Worker>('workers', {
+ *   dictKeyFields: {
+ *     civilStatus: staticDict('civilStatus', {
+ *       adultMale:   { th: 'นาย',    en: 'Mr'  },
+ *       adultFemale: { th: 'นาง',    en: 'Mrs' },
+ *     }, { displayLocale: 'th' }),
+ *   },
+ * })
+ * ```
+ */
+export interface StaticDictDescriptor<Keys extends string = string> {
+    readonly _noydbStaticDict: true;
+    /** Via port brand marker (#623 Task 9) — staticDict shares the i18n binding brand. */
+    readonly _viaBrand: 'i18n';
+    /** Which dictionary this field references (the registry name). */
+    readonly name: string;
+    /** The in-code label table: key → { locale → label }. */
+    readonly table: Readonly<Record<Keys, Readonly<Record<string, string>>>>;
+    /** Declared valid keys — derived from `Object.keys(table)`. */
+    readonly keys: readonly Keys[];
+    /**
+     * Locale used to emit `<field>Label` under a **locale-less** read — the
+     * hybrid hinge. When unset, a static dict behaves like `dictKey` under a
+     * locale-less read (no label); a locale-less consumer almost always wants
+     * it set.
+     */
+    readonly displayLocale?: string;
+    /** Same `onMissing` policy engine as `dictKey`. Default `'null'`. */
+    readonly onMissing?: OnMissingPolicy;
+    /** Ordered preferred-substitute locales for label resolution. */
+    readonly substitute?: readonly string[];
+    /**
+     * Validate the stored code against `keys` on every `put()`. Default `true`
+     * — codes are closed by construction, so an unknown code is a bug. Set
+     * `false` to allow open codes (skips the `UnknownDictCodeError` guard).
+     */
+    readonly validateCodes?: boolean;
+}
+/**
+ * Create a `StaticDictDescriptor` for a code-provided enum field — a sibling
+ * to {@link dictKey} for closed, code-defined, identical-across-vaults enums.
+ *
+ * The labels live in `table` (no `_dict_*` collection, no `rename()`); the
+ * record stores only the stable code. Pass `displayLocale` so `<field>Label`
+ * resolves even under a locale-less read.
+ *
+ * @param name   The dictionary name (used for the readonly-guard registry and
+ *               the query label seam — never creates a `_dict_<name>` key).
+ * @param table  `{ key: { locale: label } }` map.
+ * @param opts   `displayLocale` (locale-less label), `onMissing`, `substitute`.
+ *
+ * @example
+ * ```ts
+ * staticDict('civilStatus', {
+ *   adultMale:   { th: 'นาย',    en: 'Mr'  },
+ *   adultFemale: { th: 'นาง',    en: 'Mrs' },
+ * }, { displayLocale: 'th' })
+ * ```
+ */
+export declare function staticDict<const T extends Record<string, Record<string, string>>>(name: string, table: T, opts?: {
+    displayLocale?: string;
+    onMissing?: OnMissingPolicy;
+    substitute?: readonly string[];
+    validateCodes?: boolean;
+}): StaticDictDescriptor<Extract<keyof T, string>>;
+export { isStaticDictDescriptor } from '../../port/with/i18n-strategy.js';

package/dist/via/i18n/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * `@noy-db/hub/i18n` — subpath export for the multi-locale primitives.
+ *
+ * Apps that only speak English never have to import from this subpath
+ * — the main `@noy-db/hub` entry still re-exports these symbols for
+ * backward compatibility through.x. Consumers that opt into the
+ * subpath import get a smaller bundle (~2 KB estimated savings).
+ *
+ * Re-exports:
+ *   - `dictKey`, `DictionaryHandle`, dictionary collection helpers
+ *   - `i18nText`, `resolveI18nText`, `applyI18nLocale`, validators
+ */
+export * from './core.js';
+export * from './dictionary.js';
+export { resolvePolicy } from './policy.js';
+export type { OnMissing, Layer, OnMissingPolicy } from './policy.js';
+export { inferScripts, enforceScript } from './script.js';
+export type { ScriptWarning } from './script.js';
+export { withI18n } from './active.js';
+export type { I18nStrategy } from './strategy.js';
+export { ReservedCollectionNameError, DictKeyMissingError, DictKeyInUseError, MissingTranslationError, LocaleNotSpecifiedError, TranslatorNotConfiguredError, ScriptViolationError, StaticDictReadonlyError, UnknownDictCodeError, } from '../../kernel/errors.js';

package/dist/via/i18n/policy.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Per-layer i18n resolution policy.
+ *
+ * `onMissing` governs what happens when a multilingual field is resolved
+ * to a target locale that is absent. It may be a single scalar policy or
+ * a per-layer map, so a field can be lenient at the app read boundary but
+ * strict inside a materialized view.
+ *
+ * Effective policy for layer `λ`:
+ *
+ * ```
+ * explicit(λ) = typeof onMissing === 'object' ? onMissing[λ] : undefined
+ * scalar      = typeof onMissing === 'string' ? onMissing : undefined
+ * policy(λ)   = explicit(λ) ?? layerDefault(λ) ?? scalar ?? 'throw'
+ * ```
+ *
+ * - `layerDefault('guard') = 'substitute'` — guards are lenient unless
+ *   EXPLICITLY overridden; they never inherit a scalar policy (a guard
+ *   reading a display value must not hard-fail on a missing locale).
+ * - every other layer has no default, so it inherits the scalar, else
+ *   falls back to `'throw'` (today's behavior — zero breaking change).
+ *
+ * @public
+ */
+export type OnMissing = 'substitute' | 'null' | 'throw';
+/**
+ * The contexts in which a multilingual field is resolved. Each can carry
+ * its own `onMissing` policy.
+ *
+ * - `read`       — ordinary app reads (`get`/`list`/query projection).
+ * - `guard`      — a guard callback reading a value.
+ * - `join`       — a joined record expanded onto a row.
+ * - `mv`         — materialized-view input.
+ * - `derivation` — derivation input.
+ * - `export`     — bundle/public-envelope export.
+ */
+export type Layer = 'read' | 'guard' | 'join' | 'mv' | 'derivation' | 'export';
+/** Field-level policy: a single scalar, or a per-layer map. */
+export type OnMissingPolicy = OnMissing | Partial<Record<Layer, OnMissing>>;
+/**
+ * Resolve the effective `OnMissing` for a layer from a field's declared
+ * policy. See module docs for the resolution rule.
+ */
+export declare function resolvePolicy(onMissing: OnMissingPolicy | undefined, layer: Layer): OnMissing;

package/dist/via/i18n/script.d.ts

@@ -0,0 +1,26 @@
+import type { I18nTextDescriptor } from './core.js';
+/**
+ * Infer the allowed Unicode scripts for a BCP-47 locale, with asymmetric
+ * Latin tolerance. A script subtag (`th-Latn`) wins over the base
+ * language. Unknown locales default to `['Latin']`.
+ */
+export declare function inferScripts(locale: string): readonly string[];
+/** A non-fatal script violation recorded under `'filter'`/`'warn'` modes. */
+export interface ScriptWarning {
+    readonly field: string;
+    readonly locale: string;
+    readonly expected: readonly string[];
+    readonly sample: string;
+}
+/**
+ * Enforce a field's script constraint over an i18nText value map.
+ *
+ * - No `script` option ⇒ returns the value unchanged.
+ * - `onScriptViolation: 'reject'` (default) ⇒ throws {@link ScriptViolationError}.
+ * - `'filter'` ⇒ returns a copy with disallowed characters stripped + warnings.
+ * - `'warn'` ⇒ returns the value unchanged + warnings.
+ */
+export declare function enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor, exempt?: ReadonlySet<string>): {
+    value: Record<string, unknown>;
+    warnings: ScriptWarning[];
+};

package/dist/via/i18n/strategy.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Strategy seam for the optional i18n (multi-locale + dictionary)
+ * service. `I18nStrategy` + `BuildDictionaryHandleOptions` + `NO_I18N`
+ * now live on the kernel port (`port/with/i18n-strategy.ts`, #623
+ * Task 7) — re-exported here for compat with existing importers of
+ * this module. Real `applyI18nLocale` / `validateI18nTextValue` /
+ * `DictionaryHandle` are only reachable via `withI18n()` in
+ * `./active.ts`.
+ *
+ * @internal
+ */
+export type { I18nStrategy, BuildDictionaryHandleOptions } from '../../port/with/i18n-strategy.js';
+export { NO_I18N } from '../../port/with/i18n-strategy.js';

package/dist/via/lookup/active.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Active lookup strategy — `withLookup()` returns the real implementation
+ * that constructs `LookupHandle` instances (the `_dict_*` / future
+ * `_lookup_*` reserved-collection engine).
+ *
+ * #650 Task 1 (via-lookup extraction, phase D): this is the new home for
+ * the handle-construction logic that used to live inline in
+ * `via/i18n/active.ts`'s `withI18n().buildDictionaryHandle`, which
+ * now delegates here (same handle, new home — see that file). Splitting
+ * the import chain through this file is the same `#553` tree-shake seam
+ * `via/i18n/active.ts` already used: the `LookupHandle` engine only
+ * ships in a consumer's bundle once something reaches `withLookup()` (today
+ * that's transitively via `withI18n()`; later phase-D tasks may call it
+ * directly).
+ *
+ * @public
+ */
+import type { LookupStrategy } from '../../port/with/lookup-strategy.js';
+export declare function withLookup(): LookupStrategy;

package/dist/via/lookup/binding.d.ts

@@ -0,0 +1,99 @@
+/**
+ * The `'lookup'` `ViaBinding` — wires the lookup engine (present-time label
+ * dressing across all three backing tiers) into the kernel's generic Via
+ * port. Mirrors `via/i18n/binding.ts`'s #553 static-link pattern; the
+ * present-time label-dressing algorithm below is adapted from
+ * `via-i18n/binding.ts:253-337` (the same wildcard/array/scalar handling,
+ * the same `onMissing`/`substitute` policy engine), generalized to branch on
+ * `backing` instead of a static-vs-dynamic descriptor-shape check. For the
+ * `'static'` and `'reserved'` tiers this delegates to `cfg.lookupLabelResolver`
+ * — the SAME vault-built closure the i18n binding's `dictLabelResolver` uses
+ * (static table first, else the `vault.dictionary()` handle) — so a native
+ * `dict()`/`lookup(static)` field resolves through the identical label data
+ * as its `dictKey()`/`staticDict()` alias (the byte-equivalence lock).
+ *
+ * `lookup()`/`enumOf()`/`dict()` each call {@link linkLookupVia} first — the
+ * same #553 pattern `money()`/`dictKey()` use.
+ *
+ * `buildClause` (label-predicate queries) is still undeclared — out of scope
+ * for #650. `compareForOrder` (#650 Task 6, spec §5; matrix tier added Task
+ * 7) resolves a `sortBy`-declared field's ordering via `cfg.snapshotFor`'s
+ * sync snapshot; the hook signature is UNCHANGED (`via/index.ts:128-129` — no
+ * locale param), so it closes over each descriptor's own `displayLocale`
+ * (the same locale-less-hinge default `runLookupPresent`'s
+ * `hasStaticDisplay` branch already uses). `resolveOrderLabel` (#650 Task
+ * 7) is the PER-CALL-locale sibling `orderBy(..., {by:'label'})` needs —
+ * see its own doc comment below. `describeFragment` (#650 Task 7) is the
+ * first-ever consumed `ViaBinding.describeFragment` implementation — see
+ * `with-shape/introspection/describe.ts`'s `buildDescription`.
+ */
+import type { ViaBinding } from '../../kernel/via/index.js';
+import type { LookupDescriptor, LookupBacking, Vocabulary, OnDelete } from './descriptor.js';
+import type { MaterializedBacking } from './registry.js';
+/**
+ * Config a collection's lookup declarations resolve to — the binding's
+ * construction input. `lookupLabelResolver`/`getLookupBacking`/`membership`/
+ * `snapshotFor` are vault-built closures (never a `Collection` handle,
+ * keyring, or DEK/CEK — the zero-knowledge boundary).
+ */
+export interface LookupViaConfig {
+    readonly lookupFields: Record<string, LookupDescriptor>;
+    readonly lookupLabelResolver?: (dimension: string, key: string, locale: string, fallback?: unknown) => Promise<string | undefined>;
+    /**
+     * The matrix (collection) tier's present-time backing-row source, keyed by the full
+     * descriptor (not a bare dimension name) so the closure can resolve by `descriptor.key`,
+     * not the backing row's PUT-id (#651 Task 3 — the same descriptor-gaining dispatch Task 7
+     * already applied to `snapshotFor`).
+     */
+    readonly getLookupBacking?: (descriptor: LookupDescriptor) => (key: string) => Promise<Record<string, unknown> | undefined>;
+    /** Closed-vocabulary write-time membership test (#650 Task 3) — `(field, key) => known?`. */
+    readonly membership?: (field: string, key: string) => boolean | Promise<boolean>;
+    /** Sync per-descriptor altKey index — `ingest`'s normalization source (#650 Task 3). */
+    readonly getAltIndex?: (desc: LookupDescriptor) => MaterializedBacking | undefined;
+    /**
+     * Sync materialized `key -> row` rows for a lookup descriptor (#650 Task
+     * 6, spec §5; matrix-tier routing added #650 Task 7) — `compareForOrder`
+     * and `resolveOrderLabel` below, and `snapshot.ts`'s `presentForJoin`
+     * builder, all read this same vault-built closure. Reserved AND
+     * collection (matrix) tier route here (the vault wires
+     * `dimension -> LookupHandle.snapshotEntries()` / `dimension ->
+     * collection.querySourceForJoin().snapshot()` respectively, keyed by
+     * `descriptor.key` for the matrix case — see `registry.ts`'s
+     * `buildLookupSnapshotRows`); static tier is resolved locally from
+     * `descriptor.table` without calling this.
+     */
+    readonly snapshotFor?: (descriptor: LookupDescriptor) => ReadonlyMap<string, Record<string, unknown>> | undefined;
+    readonly collectionName: string;
+}
+/**
+ * One field's `lookup` descriptor as it appears on a `ViaBinding.
+ * describeFragment()` payload (#650 Task 7 — the first real consumer,
+ * `with-shape/introspection/describe.ts`'s `buildDescription`, imports this
+ * type directly; `describe.ts` is NOT under `kernel/**`, so it's free to
+ * import concrete via/ types the way it already does for
+ * `LookupDescriptor`/`MoneyDescriptor`/etc.). `dimension` is OMITTED (not
+ * emitted as `''`) for a bare `enumOf()` descriptor — the #650 Task 2
+ * `dimension:''` sentinel resolved: no dimension name means no `dimension`
+ * key, not a meaningless empty string (T2 carry, #650 Task 7).
+ */
+export interface LookupDescribeFragmentEntry {
+    readonly dimension?: string;
+    readonly backing: LookupBacking;
+    readonly vocabulary: Vocabulary;
+    readonly key: string;
+    readonly altKeys?: readonly string[];
+    readonly present?: {
+        readonly label: string;
+        readonly by?: string;
+    };
+    readonly sortBy?: string;
+    readonly onDelete: OnDelete;
+    /** Statically-known closed-vocabulary key set (declared `keys`, or a static table's own keys). Omitted when membership lives only in the backing collection/dictionary (open vocabulary, or closed with no declared `keys`). */
+    readonly keys?: readonly string[];
+}
+/** The `'lookup'` binding's `describeFragment()` payload shape. */
+export interface LookupDescribeFragment {
+    readonly lookupFields: Record<string, LookupDescribeFragmentEntry>;
+}
+export declare function lookupBinding(cfg: LookupViaConfig): ViaBinding;
+export declare function linkLookupVia(): void;

package/dist/via/lookup/descriptor.d.ts

@@ -0,0 +1,123 @@
+/**
+ * `lookup()` / `enumOf()` / `dict()` descriptors — the three declaration
+ * surfaces for the `'lookup'` via binding (#650 Task 2, phase D of the Via
+ * port). One `LookupDescriptor` shape; the tiers are `backing` details:
+ *
+ * - `lookup(dimension, opts?)`  — matrix tier: first-class collection backing
+ *   (default `backing:'collection'`) — a reference-collection dimension
+ *   (e.g. `countries`), open vocabulary by default.
+ * - `enumOf(keys)`              — enum tier: static in-config table, CLOSED
+ *   vocabulary, no backing store at all (no dimension name — pure inline
+ *   keys). Exported as `enumOf`; the barrel (`index.ts`) re-exports it as
+ *   `enum` (`enum` is a reserved word, so it can't be the function's own
+ *   name).
+ * - `dict(dimension, opts?)`    — dict tier: reserved `_dict_<dimension>`
+ *   micro-collection backing (the `vault.dictionary(name)` engine), open
+ *   vocabulary by default.
+ *
+ * Each factory calls {@link linkLookupVia} first — the declaration IS the
+ * via binding's opt-in unit (#553), same pattern as `money()`/`i18nText()`/
+ * `dictKey()`.
+ */
+import type { OnMissingPolicy } from '../i18n/policy.js';
+/** `'closed'` = enum semantics (membership enforced, Task 3); `'open'` permits unknown keys. */
+export type Vocabulary = 'open' | 'closed';
+/** Where a dimension's rows live: static in-config table / reserved micro-collection / first-class collection. */
+export type LookupBacking = 'static' | 'reserved' | 'collection';
+/** Delete-time referential policy for the backing dimension (default `'restrict'`, enforced in Task 5). */
+export type OnDelete = 'restrict' | 'cascade' | 'nullify';
+/** The one descriptor shape every tier compiles to — tiers differ only by `backing`. */
+export interface LookupDescriptor<Keys extends string = string> {
+    readonly _viaBrand: 'lookup';
+    /** Dimension/dictionary/target name. Empty for a bare `enumOf()` (no backing store, no name). */
+    readonly dimension: string;
+    /** Canonical key field on the row (default `'id'`). */
+    readonly key: string;
+    /** Candidate keys normalized to `key` on ingest (Task 3). */
+    readonly altKeys?: readonly string[];
+    readonly vocabulary: Vocabulary;
+    /** Dressing dimension: which backing-row field supplies `<field>Label`, optionally keyed `by` a sub-field (e.g. locale). */
+    readonly present?: {
+        readonly label: string;
+        readonly by?: string;
+    };
+    /** Field to sort by against the snapshot (Task 6). */
+    readonly sortBy?: string;
+    readonly backing: LookupBacking;
+    readonly onDelete: OnDelete;
+    /** Static/enum inline key set. */
+    readonly keys?: readonly Keys[];
+    /** Static tier only: in-code `key -> { locale -> label }` table. */
+    readonly table?: Readonly<Record<string, Readonly<Record<string, string>>>>;
+    /** Static hybrid hinge (the `staticDict` alias) — locale-less `<field>Label`. */
+    readonly displayLocale?: string;
+    readonly onMissing?: OnMissingPolicy;
+    readonly substitute?: readonly string[];
+    /** Inline display labels (value -> label), the dict-tier sync fallback (mirrors `dictKey`'s `labels`). */
+    readonly labels?: Record<string, string>;
+}
+/**
+ * Matrix tier — first-class collection backing (default `backing:'collection'`).
+ * `dimension` names the backing collection (e.g. `'countries'`).
+ *
+ * `backing` may be overridden to construct any tier through this one
+ * factory — e.g. `lookup(name, { backing:'static', table, displayLocale })`
+ * is the table-bearing static tier `staticDict()` compiles onto. The
+ * `table`/`displayLocale`/`keys`/`onMissing`/`substitute`/`labels` options
+ * are a superset of the brief's literal opts list: `LookupDescriptor`
+ * already carries these fields for exactly this purpose, and without them
+ * `backing:'static'` would be unreachable stand-alone through `lookup()`
+ * (see task-2-report.md's "Design decisions").
+ *
+ * **`altKeys` caveat (matrix tier only)**: normalizing an altKey candidate
+ * to its canonical `key` requires the backing `dimension` collection to be
+ * open in EAGER mode (the default; `{ prefetch: false }` — lazy mode — is
+ * unsupported). A `put()` on a field with `altKeys` whose backing collection
+ * is lazy throws a `ValidationError` naming the field and dimension; open
+ * the backing collection without `{ prefetch: false }`, or drop `altKeys`.
+ */
+export declare function lookup<Keys extends string>(dimension: string, opts?: {
+    key?: string;
+    altKeys?: readonly string[];
+    vocabulary?: Vocabulary;
+    present?: {
+        label: string;
+        by?: string;
+    };
+    sortBy?: string;
+    backing?: LookupBacking;
+    onDelete?: OnDelete;
+    keys?: readonly Keys[];
+    table?: Readonly<Record<string, Readonly<Record<string, string>>>>;
+    displayLocale?: string;
+    onMissing?: OnMissingPolicy;
+    substitute?: readonly string[];
+    labels?: Record<string, string>;
+}): LookupDescriptor<Keys>;
+/**
+ * Enum tier — static in-config table, CLOSED vocabulary, no backing store.
+ * No dimension name (pure inline keys) — `dimension` is `''`.
+ */
+export declare function enumOf<const Keys extends readonly string[]>(keys: Keys): LookupDescriptor<Keys[number]>;
+/**
+ * Dict tier — reserved `_dict_<dimension>` micro-collection backing (the
+ * `vault.dictionary(dimension)` engine), open vocabulary by default. The
+ * native equivalent of `dictKey()`.
+ *
+ * Unlike `lookup()`'s matrix tier, `dict()` has no `altKeys` option — its
+ * `_dict_<dimension>` backing is the always-synchronous `LookupHandle`
+ * write-through cache, never a `vault.collection()` that can be opened
+ * `{ prefetch: false }`, so the matrix tier's lazy-mode altKeys restriction
+ * does not apply here.
+ */
+export declare function dict<Keys extends string>(dimension: string, opts?: {
+    keys?: readonly Keys[];
+    vocabulary?: Vocabulary;
+    present?: {
+        label: string;
+        by?: string;
+    };
+    onDelete?: OnDelete;
+    onMissing?: OnMissingPolicy;
+    substitute?: readonly string[];
+}): LookupDescriptor<Keys>;