@noy-db/hub 0.4.0-pre.1 → 0.4.0-pre.10

package/dist/{link-set-QK22TDEX.js → link-set-NK6L2A5S.js}

@@ -1,23 +1,23 @@
 import {
   LinkEndpointError,
   LinkSet
-} from "./chunk-IM3QVF53.js";
+} from "./chunk-MBKVNOJS.js";
 import {
   LINK_COLLECTION_PREFIX,
   LinkIntegrityError,
   isLinkCollectionName,
   linkCollectionName,
   linkRowKey
-} from "./chunk-RTEK4C4I.js";
-import "./chunk-DVUZMT2W.js";
-import "./chunk-WEYZTLXN.js";
-import "./chunk-IY23KFNZ.js";
-import "./chunk-N6WF5PKC.js";
-import "./chunk-6HY2X62D.js";
+} from "./chunk-4JQK3L4V.js";
+import "./chunk-G2JUIDFA.js";
+import "./chunk-W3L64Y3J.js";
+import "./chunk-35NMVJ7I.js";
+import "./chunk-NFZGZ4AK.js";
+import "./chunk-QJNCB5SK.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-HOONYZY2.js";
-import "./chunk-LSASLXGC.js";
-import "./chunk-W2OG6JOL.js";
+import "./chunk-AKKRXT23.js";
+import "./chunk-QBAC3GXA.js";
+import "./chunk-QZWTRENR.js";
 import "./chunk-PZ5AY32C.js";
 export {
   LINK_COLLECTION_PREFIX,
@@ -28,4 +28,4 @@ export {
   linkCollectionName,
   linkRowKey
 };
-//# sourceMappingURL=link-set-QK22TDEX.js.map
+//# sourceMappingURL=link-set-NK6L2A5S.js.map

package/dist/materialized-views/index.js

@@ -1,44 +1,47 @@
 import {
   withMaterializedView
-} from "../chunk-T36RFODW.js";
+} from "../chunk-MXUT7FTE.js";
 import {
   MaterializedViewExecutor
-} from "../chunk-BGK233EA.js";
-import "../chunk-MTQPRQHB.js";
+} from "../chunk-N4BBNYIB.js";
+import "../chunk-IPUG56GJ.js";
 import {
   MaterializedViewRegistry,
   analyzeDependencies,
   canonicalizeQueryPlan,
   computeQueryHash,
   summarizeQueryPlan
-} from "../chunk-S3BFKGET.js";
+} from "../chunk-3HUYRN24.js";
 import {
   clearMVStale,
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "../chunk-KUPKLSX5.js";
-import "../chunk-RA5VTXXG.js";
-import "../chunk-TAGR72IR.js";
+} from "../chunk-IYZISPGD.js";
+import "../chunk-5D2ALSM5.js";
+import "../chunk-V6UQZA2H.js";
+import "../chunk-KRCBZYTZ.js";
+import "../chunk-XZHEOSQ2.js";
+import "../chunk-CADUYBQD.js";
 import "../chunk-IGJCYUT5.js";
-import "../chunk-IRQY7IR5.js";
-import "../chunk-GULTLPFB.js";
-import "../chunk-JVBO4SZL.js";
-import "../chunk-RM2XV574.js";
-import "../chunk-DVUZMT2W.js";
-import "../chunk-WEYZTLXN.js";
-import "../chunk-IY23KFNZ.js";
-import "../chunk-N6WF5PKC.js";
-import "../chunk-6HY2X62D.js";
+import "../chunk-FRMPM7WG.js";
+import "../chunk-UADPR6F4.js";
+import "../chunk-6UBZ6I5Z.js";
+import "../chunk-IXTSNGYY.js";
+import "../chunk-G2JUIDFA.js";
+import "../chunk-W3L64Y3J.js";
+import "../chunk-35NMVJ7I.js";
+import "../chunk-NFZGZ4AK.js";
+import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-HOONYZY2.js";
-import "../chunk-LSASLXGC.js";
+import "../chunk-AKKRXT23.js";
+import "../chunk-QBAC3GXA.js";
 import {
   MaterializedViewConfigError,
   MaterializedViewCycleError,
   MaterializedViewSourceUnknownError,
   MaterializedViewTooLargeError
-} from "../chunk-W2OG6JOL.js";
+} from "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MaterializedViewConfigError,

package/dist/money/index.js

@@ -0,0 +1,31 @@
+import {
+  MoneyCurrencyError,
+  MoneyPrecisionError,
+  MoneyUnsupportedError,
+  allocate,
+  asMoney,
+  isMoneyDescriptor,
+  isMoneyString,
+  money,
+  moneyNumber,
+  mulRate,
+  scaleForCurrency
+} from "../chunk-SGDPRCC4.js";
+import "../chunk-IGJCYUT5.js";
+import "../chunk-6UBZ6I5Z.js";
+import "../chunk-QZWTRENR.js";
+import "../chunk-PZ5AY32C.js";
+export {
+  MoneyCurrencyError,
+  MoneyPrecisionError,
+  MoneyUnsupportedError,
+  allocate,
+  asMoney,
+  isMoneyDescriptor,
+  isMoneyString,
+  money,
+  moneyNumber,
+  mulRate,
+  scaleForCurrency
+};
+//# sourceMappingURL=index.js.map

package/dist/noydb-FZZIMLCI.js

@@ -0,0 +1,81 @@
+import {
+  Noydb,
+  createNoydb
+} from "./chunk-NFIBXF4V.js";
+import "./chunk-NJ4DYYO5.js";
+import "./chunk-4JQK3L4V.js";
+import "./chunk-SHEEBRZ4.js";
+import "./chunk-LNZKOUJR.js";
+import "./chunk-7YVBQJ7K.js";
+import "./chunk-6LJY7X5A.js";
+import "./chunk-GYGLAVCX.js";
+import "./chunk-Y2NJBNX3.js";
+import "./chunk-BLBAQRBM.js";
+import "./chunk-TG634KCO.js";
+import "./chunk-FQZ6XTQ7.js";
+import "./chunk-VYYM3MEN.js";
+import "./chunk-6ZNSB3H6.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-4ZKNC6A6.js";
+import "./chunk-IPUG56GJ.js";
+import "./chunk-ZTLOXFPB.js";
+import "./chunk-55LKVALY.js";
+import "./chunk-5GQEU4DN.js";
+import "./chunk-EE7UHLKH.js";
+import "./chunk-UDHBXYGG.js";
+import "./chunk-GHVIKOHT.js";
+import "./chunk-NM5UYF6Q.js";
+import "./chunk-SMY5X46Z.js";
+import "./chunk-DZFQVICS.js";
+import "./chunk-NGSJZFGL.js";
+import "./chunk-5D2ALSM5.js";
+import "./chunk-MCHBCNCE.js";
+import "./chunk-AURFOK3D.js";
+import "./chunk-L2DGWBCT.js";
+import "./chunk-YWWQM7KP.js";
+import "./chunk-WBKZUO5V.js";
+import "./chunk-V6UQZA2H.js";
+import "./chunk-CXQW2NWO.js";
+import "./chunk-L3YYLT4E.js";
+import "./chunk-KPZS5QAQ.js";
+import "./chunk-NO272T7Q.js";
+import "./chunk-XZHEOSQ2.js";
+import "./chunk-YMUFFJCO.js";
+import "./chunk-CADUYBQD.js";
+import "./chunk-IGJCYUT5.js";
+import "./chunk-PVEWA2DU.js";
+import "./chunk-PEOZ34EM.js";
+import "./chunk-W3G5REIU.js";
+import "./chunk-FRMPM7WG.js";
+import "./chunk-UADPR6F4.js";
+import "./chunk-6UBZ6I5Z.js";
+import "./chunk-NFNJLRY7.js";
+import "./chunk-WLXMTYGO.js";
+import "./chunk-BLCWSJLN.js";
+import "./chunk-JJZGIE4U.js";
+import "./chunk-PTHKZWEH.js";
+import "./chunk-IXNCZTWA.js";
+import "./chunk-VKQCVU2Z.js";
+import "./chunk-ZJADGNYF.js";
+import "./chunk-AFHQATY4.js";
+import "./chunk-ABS7FMMD.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-JYJFGD2H.js";
+import "./chunk-IXTSNGYY.js";
+import "./chunk-OLEPKFTW.js";
+import "./chunk-QD46HPZG.js";
+import "./chunk-G2JUIDFA.js";
+import "./chunk-W3L64Y3J.js";
+import "./chunk-35NMVJ7I.js";
+import "./chunk-NFZGZ4AK.js";
+import "./chunk-QJNCB5SK.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AKKRXT23.js";
+import "./chunk-QBAC3GXA.js";
+import "./chunk-QZWTRENR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  Noydb,
+  createNoydb
+};
+//# sourceMappingURL=noydb-FZZIMLCI.js.map

package/dist/overlay-views/index.js

@@ -1,18 +1,18 @@
 import {
   withOverlayedView
-} from "../chunk-WNGGJWF7.js";
+} from "../chunk-MSMJJB4J.js";
 import {
   OverlayedCollection
-} from "../chunk-5WZXVULX.js";
+} from "../chunk-ZTLOXFPB.js";
 import {
   OverlayedViewRegistry
-} from "../chunk-GWKAVKHI.js";
+} from "../chunk-IG6KUWBX.js";
 import {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,
   OverlayIdMismatchError,
   OverlayNameCollisionError
-} from "../chunk-W2OG6JOL.js";
+} from "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   OverlayBaseIsVirtualError,

package/dist/periods/index.js

@@ -1,13 +1,14 @@
 import {
   withPeriods
-} from "../chunk-N55W7KUL.js";
+} from "../chunk-QDIH2744.js";
 import {
+  NO_PERIODS,
   appendPeriodLedgerEntry,
   assertTsWritable,
   chainAnchor,
   loadPeriods,
   validatePeriodName
-} from "../chunk-ZEQWCBCM.js";
+} from "../chunk-UDHBXYGG.js";
 import "../chunk-GHVIKOHT.js";
 import {
   PERIODS_COLLECTION,
@@ -15,21 +16,22 @@ import {
   PERIOD_FREEZES_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION,
   periodExclusiveUpperBound
-} from "../chunk-2IALOXZS.js";
-import "../chunk-UFEVO57O.js";
+} from "../chunk-NM5UYF6Q.js";
+import "../chunk-ABS7FMMD.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-RM2XV574.js";
-import "../chunk-DVUZMT2W.js";
-import "../chunk-WEYZTLXN.js";
-import "../chunk-IY23KFNZ.js";
-import "../chunk-N6WF5PKC.js";
-import "../chunk-6HY2X62D.js";
+import "../chunk-IXTSNGYY.js";
+import "../chunk-G2JUIDFA.js";
+import "../chunk-W3L64Y3J.js";
+import "../chunk-35NMVJ7I.js";
+import "../chunk-NFZGZ4AK.js";
+import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-HOONYZY2.js";
-import "../chunk-LSASLXGC.js";
-import "../chunk-W2OG6JOL.js";
+import "../chunk-AKKRXT23.js";
+import "../chunk-QBAC3GXA.js";
+import "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 export {
+  NO_PERIODS,
   PERIODS_COLLECTION,
   PERIOD_ARCHIVES_COLLECTION,
   PERIOD_FREEZES_COLLECTION,

package/dist/pod/index.js

@@ -1,10 +1,9 @@
-import "../chunk-CHFZDSE4.js";
 import {
   createBundleStore,
   createPodStore,
   wrapBundleStore,
   wrapPodStore
-} from "../chunk-YTGDPCPW.js";
+} from "../chunk-Y6B6HVKC.js";
 import {
   COMPRESSION_BROTLI,
   COMPRESSION_GZIP,
@@ -15,6 +14,7 @@ import {
   NOYDB_BUNDLE_MAGIC,
   NOYDB_BUNDLE_PREFIX_BYTES,
   encodeBundleHeader,
+  hasNoydbBundleMagic,
   readNoydbBundle,
   readNoydbBundleHeader,
   readPod,
@@ -24,23 +24,35 @@ import {
   validateBundleHeader,
   writeNoydbBundle,
   writePod
-} from "../chunk-A7JJLVGH.js";
-import "../chunk-J6Q7UVQE.js";
+} from "../chunk-LNPUSMZL.js";
+import "../chunk-TUXQSFHZ.js";
 import {
   generateULID,
   isULID
 } from "../chunk-ZJADGNYF.js";
-import "../chunk-DVUZMT2W.js";
-import "../chunk-WEYZTLXN.js";
-import "../chunk-IY23KFNZ.js";
-import "../chunk-N6WF5PKC.js";
-import "../chunk-6HY2X62D.js";
+import "../chunk-G2JUIDFA.js";
+import "../chunk-W3L64Y3J.js";
+import "../chunk-35NMVJ7I.js";
+import "../chunk-NFZGZ4AK.js";
+import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-HOONYZY2.js";
-import "../chunk-LSASLXGC.js";
-import "../chunk-W2OG6JOL.js";
+import "../chunk-AKKRXT23.js";
+import "../chunk-QBAC3GXA.js";
+import {
+  BackupCorruptedError,
+  BackupLedgerError,
+  BundleIntegrityError,
+  BundleSealMismatchError,
+  BundleVersionConflictError,
+  PodVersionConflictError
+} from "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 export {
+  BackupCorruptedError,
+  BackupLedgerError,
+  BundleIntegrityError,
+  BundleSealMismatchError,
+  BundleVersionConflictError,
   COMPRESSION_BROTLI,
   COMPRESSION_GZIP,
   COMPRESSION_NONE,
@@ -49,10 +61,12 @@ export {
   NOYDB_BUNDLE_FORMAT_VERSION,
   NOYDB_BUNDLE_MAGIC,
   NOYDB_BUNDLE_PREFIX_BYTES,
+  PodVersionConflictError,
   createBundleStore,
   createPodStore,
   encodeBundleHeader,
   generateULID,
+  hasNoydbBundleMagic,
   isULID,
   readNoydbBundle,
   readNoydbBundleHeader,

package/dist/{policy-NAHB2TUT.js → policy/index.js}

@@ -6,21 +6,21 @@ import {
   createNoydbPolicy,
   describeGate,
   mergePolicy
-} from "./chunk-RND5ZPNP.js";
+} from "../chunk-G6WWZNJP.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
   loadVaultPolicy,
   saveVaultPolicy
-} from "./chunk-CBSY2N76.js";
-import "./chunk-LSASLXGC.js";
+} from "../chunk-WLXMTYGO.js";
+import "../chunk-QBAC3GXA.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
   RecoveryNotEnrolledError,
   RecoveryProfileNotImplementedError
-} from "./chunk-W2OG6JOL.js";
-import "./chunk-PZ5AY32C.js";
+} from "../chunk-QZWTRENR.js";
+import "../chunk-PZ5AY32C.js";
 export {
   DEFAULT_FRESHNESS_MS,
   META_COLLECTION,
@@ -38,4 +38,4 @@ export {
   mergePolicy,
   saveVaultPolicy
 };
-//# sourceMappingURL=policy-NAHB2TUT.js.map
+//# sourceMappingURL=index.js.map

package/dist/port/with/archive-strategy.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Strategy seam between the kernel spine and the optional archive service
+ * (#838 — precedent: `port/with/blob-strategy.ts`). Lives on the `/with`
+ * port so `Vault` can hold the `NO_ARCHIVE` default without a
+ * spine→service static import.
+ *
+ * `archiveStrategy` was the one service with no NO-op stub: the spine held
+ * it as `ArchiveStrategy | undefined` and hand-rolled a null gate before
+ * every use. That made it the sole exception to the strategy-bag's "every
+ * key always resolves" rule (#838), so the stub exists to remove the
+ * exception rather than to add a capability.
+ *
+ * `ArchiveStrategy`'s only member is a live cold `NoydbStore`, and there is
+ * no meaningful no-op store — so the stub throws on access instead of
+ * standing in. That reproduces the previous gate exactly: `_archiveContext()`
+ * read `strategy.store` immediately after its null check, so the throw lands
+ * in the same call with the same message.
+ *
+ * The `ArchiveStrategy` import is TYPE-ONLY and therefore erased — importing
+ * it does not pull `with-fork/archive/index.js`'s runtime re-exports of the
+ * relocation engine.
+ *
+ * @internal
+ */
+import type { ArchiveStrategy } from '../../with-fork/archive/index.js';
+/**
+ * The un-opted-in archive strategy. Reading `.store` throws with a pointer
+ * at the `withArchive()` factory — the archive service has no degraded mode
+ * to fall back to.
+ */
+export declare const NO_ARCHIVE: ArchiveStrategy;

package/dist/port/with/blob-strategy.d.ts

@@ -6,7 +6,7 @@
  * `Collection`/`Vault` can hold the `NO_BLOBS` default without a
  * spine→service static import.
  *
- * Core imports `BlobStrategy` as a TYPE-ONLY symbol and `NO_BLOBS` as a
+ * Core imports `BlobsStrategy` as a TYPE-ONLY symbol and `NO_BLOBS` as a
  * minimal runtime stub. Neither pulls in the heavy `BlobSet` / chunk /
  * MIME machinery — those only arrive when the consumer explicitly
  * imports `@noy-db/hub/blobs` (see `via/blob/index.ts` →
@@ -22,6 +22,7 @@ import type { NoydbStore } from '../../kernel/types.js';
 import type { ObjectProjection } from '../../with-shape/blobs/object-projection.js';
 import type { BlobFieldsConfig } from '../../with-shape/blobs/blob-compaction.js';
 import type { EnclaveKey } from '../../kernel/enclave/index.js';
+import type { BlobCacheStats } from '../../with-shape/blobs/blob-pinning.js';
 import type { UnlockedKeyring } from '../../with-party/team/keyring.js';
 /**
  * Args forwarded by `Collection.blob(id)` to the active strategy's
@@ -30,7 +31,7 @@ import type { UnlockedKeyring } from '../../with-party/team/keyring.js';
  *
  * @internal
  */
-export interface BlobStrategyOpenArgs {
+export interface BlobsStrategyOpenArgs {
     readonly store: NoydbStore;
     readonly vault: string;
     readonly collection: string;
@@ -85,8 +86,17 @@ export interface BlobStrategyOpenArgs {
  *
  * @internal
  */
-export interface BlobStrategy {
-    openSlot(args: BlobStrategyOpenArgs): BlobSet;
+export interface BlobsStrategy {
+    openSlot(args: BlobsStrategyOpenArgs): BlobSet;
+    /**
+     * Snapshot of this device's blob-cache KPI counters: local-read hits,
+     * network misses, and total bytes downloaded from the object store (#808).
+     *
+     * Lives on the seam rather than on the `withBlobs()` return type so the
+     * service has exactly one name (#844b) — `NO_BLOBS` answers with zeros,
+     * which is the truthful reading of "blobs were never enabled".
+     */
+    cacheStats(): BlobCacheStats;
 }
 /**
  * Default strategy for collections that did not opt into blob storage.
@@ -95,4 +105,4 @@ export interface BlobStrategy {
  *
  * @internal
  */
-export declare const NO_BLOBS: BlobStrategy;
+export declare const NO_BLOBS: BlobsStrategy;

package/dist/port/with/collection-options.d.ts

@@ -0,0 +1,171 @@
+/**
+ * Options for `Vault.collection()` — opening or declaring a collection (#841).
+ *
+ * ## Why this lives on the port
+ *
+ * The shape references descriptor types owned by services — `EmbeddingDescriptor`
+ * (`with-lookup`), `ComputedFields` (`with-formula`), `FieldMeta` (`with-shape`) —
+ * so it cannot sit in `kernel/`: `port-layering` forbids the spine from
+ * statically importing a `with-*` service, and the grandfathered lists are
+ * frozen per file. `port/with/` is the seam that exists for exactly this, and
+ * port files may reach services freely — the same reasoning that placed the
+ * strategy table here in #838.
+ *
+ * @internal
+ */
+import type { CacheOptions } from '../../kernel/collection.js';
+import type { RefDescriptor } from '../../kernel/refs.js';
+import type { StandardSchemaV1 } from '../../kernel/schema.js';
+import type { ConflictPolicy, HistoryConfig, IndexDefFor, IndexFieldName, MoneyFieldsOpt, SensitiveOpt, TierMode } from '../../kernel/types.js';
+import type { ViaFieldSpec } from '../../kernel/via/compose.js';
+import type { ClassifiedEntry } from '../../port/with/classified-strategy.js';
+import type { CrdtMode } from '../../with-commit/crdt/crdt.js';
+import type { ComputedFields } from '../../with-formula/computed/index.js';
+import type { EmbeddingDescriptor } from '../../with-lookup/embeddings/index.js';
+import type { BlobFieldsConfig } from '../../with-shape/blobs/blob-compaction.js';
+import type { FieldMeta } from '../../with-shape/introspection/field-meta.js';
+import type { CollectionMeta } from '../../with-shape/introspection/meta.js';
+import type { DictKeyDescriptor, I18nTextDescriptor, StaticDictDescriptor } from './i18n-strategy.js';
+import type { LookupDescriptor } from '../../via/lookup/descriptor.js';
+import type { ArchivePolicy } from '../../with-fork/archive/index.js';
+import type { SchemaUpdateStrategy } from '../../with-shape/schema-update/types.js';
+import type { AttestationFieldSchema } from '@noy-db/attestation';
+/**
+ * Options for {@link Vault.collection} — opening or declaring a collection.
+ *
+ * Extracted from a 124-line inline literal (#841). Naming it lets consumers
+ * annotate a call, lets `describe()` reuse the shape, and means a new option
+ * is one edit here rather than an edit buried in the middle of a 534-line
+ * method.
+ *
+ * Named `OpenCollectionOptions`, not `CollectionOptions` as the issue
+ * suggested, to keep a clear gap from the existing `CollectionOpts` in
+ * `collection-config.ts` — that one is the `Collection` CONSTRUCTOR's input,
+ * built from this one. A one-character difference between two adjacent
+ * config types is exactly the wart #844 is about.
+ */
+export interface OpenCollectionOptions<T, S extends keyof T & string = never, Q extends keyof T & string = never, M extends keyof T & string = never> {
+    indexes?: readonly IndexDefFor<IndexFieldName<T, S, Q>>[];
+    /** — auto-reconcile policy for persisted-index drift. */
+    reconcileOnOpen?: 'off' | 'dry-run' | 'auto';
+    prefetch?: boolean;
+    cache?: CacheOptions;
+    schema?: StandardSchemaV1<unknown, T>;
+    refs?: Record<string, RefDescriptor>;
+    /** — declare i18nText fields for locale-aware reads. */
+    i18nFields?: Record<string, I18nTextDescriptor>;
+    /** — embedding config for write-time vector derivation + semantic retrieval. */
+    embeddings?: EmbeddingDescriptor;
+    /** — string fields exposed to client-side `retrieve()`. */
+    textIndexes?: readonly IndexFieldName<T, S>[];
+    /** — pre-build the lexical index on open (eager-only). */
+    warmIndexOnOpen?: boolean;
+    /** — persist the lexical index as an opaque encrypted blob at `_ftindex/<name>`. */
+    textIndexPersist?: boolean;
+    /** — declare dictKey / staticDict fields for label resolution on reads. */
+    dictKeyFields?: Record<string, DictKeyDescriptor | StaticDictDescriptor>;
+    /** — declare lookup() / enumOf() / dict() fields (#650 Task 2 — the 'lookup' via binding's three tiers). */
+    lookupFields?: Record<string, LookupDescriptor>;
+    /** Consumer-neutral per-field descriptors (label/unit/semanticType/sensitivity…). See collection.describe(). */
+    fieldMeta?: Record<string, FieldMeta>;
+    /** The collection's own descriptive metadata (label/description/icon). See collection.describe(). */
+    meta?: CollectionMeta;
+    /** — declare money() fields for currency-safe decimal storage/formatting. */
+    moneyFields?: MoneyFieldsOpt<T, M>;
+    viaFields?: Record<string, ViaFieldSpec>;
+    /** — declare computed scalar fields, evaluated on write (schema-owned). Each entry may be
+     *  a plain `(record) => value` function, OR `{ fn, deps }` to declare source fields for
+     *  taint propagation (#638 Task 7 — supersedes the retired `computedDeps` option). */
+    computed?: ComputedFields<T>;
+    /** — declare classified() sensitive-field descriptors. See the classified-fields spec. */
+    classifiedFields?: Record<string, ClassifiedEntry>;
+    /** — per-collection conflict resolution policy. */
+    conflictPolicy?: ConflictPolicy<T>;
+    /** — CRDT mode for collaborative editing without conflicts. */
+    crdt?: CrdtMode;
+    /**
+     * declare deterministic-encryption fields for blind
+     * equality search. See `Collection` constructor docs for the full
+     * trade-off. Requires `acknowledgeDeterministicRisk: true`.
+     */
+    deterministicFields?: readonly IndexFieldName<T, S>[];
+    /** — explicit ack that deterministic encryption leaks equality. */
+    acknowledgeDeterministicRisk?: boolean;
+    /** — explicit ack for the classified `equatable` knob (R8 door). Required
+     *  when any classified field declares `equatable: true`. */
+    acknowledgeEquatableRisk?: boolean;
+    /**
+     * — structural group-encryption. Fields sealed into their own
+     * `_sealed[field]` envelope slot (per-field key), kept out of the open
+     * `_data` blob. Default-off; byte-identical output when absent.
+     */
+    sensitive?: SensitiveOpt<T, S>;
+    /**
+     * — per-record content-encryption keys. When `true`, every record
+     * body is encrypted under a fresh per-record CEK wrapped under the
+     * collection DEK (`_cek`), stable across versions. Foundation for
+     * per-record erasure / record-scoped sealing. Off by
+     * default; non-adopting collections take the legacy path unchanged.
+     */
+    perRecordKeys?: boolean;
+    satelliteOf?: string;
+    fields?: readonly string[];
+    joined?: string;
+    /**
+     * Per-record provenance tracking. When `true`, `put()` calls that
+     * supply a `source` option stamp `_source` / `_sourceTs` onto the
+     * unencrypted envelope metadata. Off by default.
+     */
+    provenance?: boolean;
+    /**
+     * declarative blob retention / TTL policy per slot
+     * name. Values are `{ retainDays?, evictWhen? }`. Evaluated only
+     * when `vault.compact()` runs.
+     */
+    blobFields?: BlobFieldsConfig<T>;
+    blobTierPolicy?: 'isolate' | 'dedup';
+    /** — declarative record archival policy: `{ archiveWhen, legalHold? }`. Evaluated when `vault.archive()` runs. */
+    archive?: ArchivePolicy<T>;
+    /** — declared tiers for this collection. */
+    tiers?: readonly number[];
+    /**  — how lower-tier reads see above-tier records. */
+    tierMode?: TierMode;
+    /**
+     * Opt-in persisted JSON Schema. When `true` AND a Zod `schema` is
+     * provided, hub derives a JSON Schema via `zod-to-json-schema`
+     * (optional peer-dep) and writes an encrypted snapshot to
+     * `_schemas/<collectionName>`. Re-runs on every open; hash-skip
+     * avoids write churn when the schema is unchanged.
+     *
+     * Default: `false`. Non-Zod Standard Schema validators receive a
+     * stub envelope flagging the kind without a JSON Schema body.
+     *
+     * @see docs/superpowers/specs/2026-05-22-schema-dump-design.md
+     */
+    persistJsonSchema?: boolean;
+    /**
+     * Ordered schema-update strategies. On a detected schema
+     * change, evaluated in order; the first non-`allow` decision wins.
+     * A `reject` is enforced at the write path (`put`/`delete` throw).
+     * Requires `persistJsonSchema: true` (detection needs the baseline).
+     */
+    schemaUpdate?: readonly SchemaUpdateStrategy[];
+    /** — declare the per-field schema for document attestation (issue side). */
+    attestation?: AttestationFieldSchema;
+    /**
+     * Per-collection history & tamper-ledger scoping. Overrides the
+     * vault-wide `history` config for THIS collection only (wholesale, not
+     * merged). `enabled: false` suppresses per-record snapshots for this
+     * collection; `ledger: false` excludes its writes from the vault-wide
+     * hash-chained tamper ledger. Lets you confine version snapshots +
+     * tamper-evidence to the few collections where they carry legal weight,
+     * without paying snapshot + ledger-entry-per-write across operational /
+     * derived collections. Defaults to the vault-wide `history` config.
+     */
+    historyConfig?: HistoryConfig;
+    /**
+     * Opt-in: keep the working set encrypted in RAM, decrypting on read (future phase).
+     * Default false — the working set is plaintext.
+     */
+    ramCiphertext?: boolean;
+}