@noy-db/hub 0.4.0-pre.1 → 0.4.0-pre.10

package/dist/team/index.js

@@ -1,47 +1,37 @@
 import {
-  credentialStatus,
-  deleteCredential,
-  getCredential,
-  listCredentials,
-  putCredential,
   withTeam
-} from "../chunk-JZWWLLVY.js";
+} from "../chunk-5JOFWL4G.js";
 import {
   NO_TEAM,
+  burnPaperRecoveryEntry,
   deriveMagicLinkContentKey,
+  describeAllUsersAuth,
+  describeAuthConfig,
+  describeUserAuth,
+  diagramAuthConfig,
   enrollAuthenticator,
   findAuthenticator,
   isMagicLinkGrantExpired,
   listMagicLinkGrants,
+  loadPaperRecoveryEntries,
   magicLinkGrantRecordId,
+  mintPaperRecoveryEntry,
+  mintWrappedDeksBlob,
   readMagicLinkGrantRecord,
-  recoverPassphrase,
+  recoverSecret,
   recoverUser,
   removeAuthenticator,
   revokeMagicLinkGrant,
-  rotatePassphrase,
+  rotateSecret,
+  savePaperRecoveryEntries,
+  unwrapDeksFromBlob,
+  unwrapDeksFromPaperEntry,
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-LOF2W3JU.js";
-import {
-  burnPaperRecoveryEntry,
-  loadPaperRecoveryEntries,
-  mintPaperRecoveryEntry,
-  mintWrappedDeksBlob,
-  savePaperRecoveryEntries,
-  unwrapDeksFromBlob,
-  unwrapDeksFromPaperEntry
-} from "../chunk-2MUZ3LY6.js";
-import {
-  PresenceHandle,
-  SyncEngine,
-  SyncTransaction
-} from "../chunk-SMGEYW6G.js";
-import "../chunk-VQNJ7UZL.js";
-import "../chunk-2IALOXZS.js";
+} from "../chunk-NFNJLRY7.js";
+import "../chunk-WLXMTYGO.js";
 import {
-  SYNC_CREDENTIALS_COLLECTION,
   buildRecipientKeyringFile,
   changeSecret,
   createOwnerKeyring,
@@ -57,46 +47,42 @@ import {
   persistKeyring,
   revoke,
   updateKeyringIdentity
-} from "../chunk-3SV2EPMN.js";
-import "../chunk-PK6QCH2C.js";
-import "../chunk-UC2ETWF3.js";
-import "../chunk-DVUZMT2W.js";
-import "../chunk-WEYZTLXN.js";
-import "../chunk-IY23KFNZ.js";
-import "../chunk-N6WF5PKC.js";
-import "../chunk-6HY2X62D.js";
+} from "../chunk-BLCWSJLN.js";
+import "../chunk-JJZGIE4U.js";
+import "../chunk-PTHKZWEH.js";
+import "../chunk-G2JUIDFA.js";
+import "../chunk-W3L64Y3J.js";
+import "../chunk-35NMVJ7I.js";
+import "../chunk-NFZGZ4AK.js";
+import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-HOONYZY2.js";
-import "../chunk-LSASLXGC.js";
+import "../chunk-AKKRXT23.js";
+import "../chunk-QBAC3GXA.js";
 import {
   TeamNotEnabledError
-} from "../chunk-W2OG6JOL.js";
+} from "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_TEAM,
-  PresenceHandle,
-  SYNC_CREDENTIALS_COLLECTION,
-  SyncEngine,
-  SyncTransaction,
   TeamNotEnabledError,
   buildRecipientKeyringFile,
   burnPaperRecoveryEntry,
   changeSecret,
   createOwnerKeyring,
-  credentialStatus,
-  deleteCredential,
   deriveMagicLinkContentKey,
+  describeAllUsersAuth,
+  describeAuthConfig,
+  describeUserAuth,
+  diagramAuthConfig,
   enrollAuthenticator,
   ensureCollectionDEK,
   evaluateExportCapability,
   evaluateImportCapability,
   findAuthenticator,
-  getCredential,
   grant,
   hasExportCapability,
   hasImportCapability,
   isMagicLinkGrantExpired,
-  listCredentials,
   listMagicLinkGrants,
   listUsers,
   listUsersWithEnvelopes,
@@ -106,14 +92,13 @@ export {
   mintPaperRecoveryEntry,
   mintWrappedDeksBlob,
   persistKeyring,
-  putCredential,
   readMagicLinkGrantRecord,
-  recoverPassphrase,
+  recoverSecret,
   recoverUser,
   removeAuthenticator,
   revoke,
   revokeMagicLinkGrant,
-  rotatePassphrase,
+  rotateSecret,
   savePaperRecoveryEntries,
   unwrapDeksFromBlob,
   unwrapDeksFromPaperEntry,

package/dist/tiers/index.js

@@ -11,19 +11,19 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-DDATL6PU.js";
-import "../chunk-UC2ETWF3.js";
-import "../chunk-DVUZMT2W.js";
-import "../chunk-WEYZTLXN.js";
-import "../chunk-IY23KFNZ.js";
-import "../chunk-N6WF5PKC.js";
-import "../chunk-6HY2X62D.js";
+} from "../chunk-Y2NJBNX3.js";
+import "../chunk-PTHKZWEH.js";
+import "../chunk-G2JUIDFA.js";
+import "../chunk-W3L64Y3J.js";
+import "../chunk-35NMVJ7I.js";
+import "../chunk-NFZGZ4AK.js";
+import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-HOONYZY2.js";
-import "../chunk-LSASLXGC.js";
+import "../chunk-AKKRXT23.js";
+import "../chunk-QBAC3GXA.js";
 import {
   TiersNotEnabledError
-} from "../chunk-W2OG6JOL.js";
+} from "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_TIERS,

package/dist/to/index.js

@@ -4,7 +4,7 @@ import {
   NetworkError,
   PodVersionConflictError,
   StoreCapabilityError
-} from "../chunk-W2OG6JOL.js";
+} from "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   BundleVersionConflictError,

package/dist/{tx → transactions}/index.js

@@ -3,12 +3,16 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "../chunk-JRBNCUNT.js";
+} from "../chunk-NGSJZFGL.js";
+import {
+  lazy
+} from "../chunk-5D2ALSM5.js";
 import "../chunk-ZJADGNYF.js";
-import "../chunk-W2OG6JOL.js";
+import "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/tx/dry-run.ts
+var loadGuardExecutor = lazy(() => import("../executor-RM7XWQDU.js"));
 var SEP = " ";
 var keyOf = (op) => `${op.vaultName}${SEP}${op.collectionName}${SEP}${op.id}`;
 async function runDryRun(db, fn) {
@@ -44,7 +48,7 @@ async function runDryRun(db, fn) {
     const gctx = { existing: before, vault: facade, userId: v.userId, role: v.role };
     try {
       await registry.runChecks(op.collectionName, after, gctx);
-      const { GuardExecutor } = await import("../executor-KGNLJD6M.js");
+      const { GuardExecutor } = await loadGuardExecutor();
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, op.id, before, after);
       }

package/dist/transactions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/with-commit/tx/dry-run.ts","../../src/with-commit/tx/active.ts"],"sourcesContent":["/**\n * Dry-run transactions. Runs the tx body to STAGE ops, then builds\n * the directly-affected diff (before = current committed via collection.get,\n * after = staged record) and collects guard violations — without executing\n * phase 2. No adapter writes, no write-hooks, no commit. MV/derivation\n * cascade is NOT simulated (v2). Mirrors the guard loop in\n * `Collection._putInternal` — keep the two in sync.\n */\nimport type { Noydb } from '../../kernel/noydb.js'\nimport { TxContext, type StagedOp } from './transaction.js'\n\nimport { lazy } from '../../kernel/lazy.js'\n\n/** #846c — one memoized binding instead of a cast at the call site. */\nconst loadGuardExecutor = lazy(() => import('../../with-audit/guards/executor.js'))\n\nexport interface AffectedDocument {\n  readonly vault: string\n  readonly op: 'create' | 'update' | 'delete'\n  readonly collection: string\n  readonly docId: string\n  readonly before: unknown // current committed record; null when creating\n  readonly after: unknown // staged record; null when deleting\n}\n\nexport interface GuardViolation {\n  readonly vault: string\n  readonly collection: string\n  readonly docId: string\n  readonly message: string\n}\n\nexport interface DryRunResult {\n  readonly affected: ReadonlyArray<AffectedDocument>\n  readonly guardViolations: ReadonlyArray<GuardViolation>\n}\n\nconst SEP = ' '\nconst keyOf = (op: StagedOp) => `${op.vaultName}${SEP}${op.collectionName}${SEP}${op.id}`\n\nexport async function runDryRun(\n  db: Noydb,\n  fn: (tx: TxContext) => unknown,\n): Promise<DryRunResult> {\n  const ctx = new TxContext(db)\n  await fn(ctx) // stage ops (reads see staged writes via TxCollection); nothing committed\n\n  // Dedup by (vault, collection, id) — last staged op wins.\n  const lastOp = new Map<string, StagedOp>()\n  for (const op of ctx._ops) lastOp.set(keyOf(op), op)\n\n  const affected: AffectedDocument[] = []\n  const guardViolations: GuardViolation[] = []\n\n  for (const op of lastOp.values()) {\n    const v = db.vault(op.vaultName)\n    const coll = v.collection(op.collectionName)\n    const before = await coll.get(op.id)\n\n    if (op.type === 'delete') {\n      affected.push({ vault: op.vaultName, op: 'delete', collection: op.collectionName, docId: op.id, before, after: null })\n      continue\n    }\n\n    const after = op.record ?? null\n    affected.push({\n      vault: op.vaultName,\n      op: before === null ? 'create' : 'update',\n      collection: op.collectionName,\n      docId: op.id,\n      before,\n      after,\n    })\n\n    // Guard violations — run the SAME checks Collection._putInternal does,\n    // with the SAME ctx (existing + read-only facade + userId + role), but\n    // collect the first thrown error instead of aborting.\n    const registry = v._getGuardRegistry()\n    if (!registry) continue\n    const guards = registry.guardsFor(op.collectionName)\n    if (guards.length === 0) continue\n    const facade = v._getReadOnlyFacade()\n    if (!facade) continue\n    const gctx = { existing: before as Record<string, unknown> | null, vault: facade, userId: v.userId, role: v.role }\n    try {\n      await registry.runChecks(op.collectionName, after as Record<string, unknown>, gctx)\n      const { GuardExecutor } = await loadGuardExecutor()\n      for (const g of guards) {\n        await GuardExecutor.checkFrozenFields(g, op.id, before as Record<string, unknown> | null, after as Record<string, unknown>)\n      }\n    } catch (err) {\n      guardViolations.push({\n        vault: op.vaultName,\n        collection: op.collectionName,\n        docId: op.id,\n        message: err instanceof Error ? err.message : String(err),\n      })\n    }\n  }\n\n  return { affected, guardViolations }\n}\n","/**\n * Active transactions strategy. Only reachable via `@noy-db/hub/transactions`.\n */\n\nimport { runTransaction } from './transaction.js'\nimport { runDryRun } from './dry-run.js'\nimport type { TransactionsStrategy } from './strategy.js'\nimport type { TransactionInvariant } from './invariants.js'\n\n/**\n * Options for {@link withTransactions}. Currently only commit-time\n * changeset `invariants` (see {@link TransactionInvariant}).\n */\nexport interface WithTransactionsOptions {\n  /**\n   * Commit-time set-level invariants run over the changeset on every\n   * commit (ordinary AND amendment). See {@link TransactionInvariant}.\n   */\n  invariants?: ReadonlyArray<TransactionInvariant>\n}\n\n/**\n * Build the default transactions strategy. Pass into\n * `createNoydb({ transactionsStrategy: withTransactions() })` to enable\n * `db.transaction(fn)` (and `db.transaction({ dryRun: true }, fn)`).\n *\n * Supply `{ invariants }` to register commit-time changeset invariants —\n * set-level constraints that fire after the writes commit and revert the\n * transaction on a throw. Unlike `amendment.invariant`, these run for\n * ordinary `db.transaction(fn)` calls (and amendments) with no role gate.\n */\nexport function withTransactions(opts?: WithTransactionsOptions): TransactionsStrategy {\n  const invariants = opts?.invariants ?? []\n  return {\n    runTransaction: (db, fn, options) => runTransaction(db, fn, options, invariants),\n    runDryRun,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAcA,IAAM,oBAAoB,KAAK,MAAM,OAAO,yBAAqC,CAAC;AAuBlF,IAAM,MAAM;AACZ,IAAM,QAAQ,CAAC,OAAiB,GAAG,GAAG,SAAS,GAAG,GAAG,GAAG,GAAG,cAAc,GAAG,GAAG,GAAG,GAAG,EAAE;AAEvF,eAAsB,UACpB,IACA,IACuB;AACvB,QAAM,MAAM,IAAI,UAAU,EAAE;AAC5B,QAAM,GAAG,GAAG;AAGZ,QAAM,SAAS,oBAAI,IAAsB;AACzC,aAAW,MAAM,IAAI,KAAM,QAAO,IAAI,MAAM,EAAE,GAAG,EAAE;AAEnD,QAAM,WAA+B,CAAC;AACtC,QAAM,kBAAoC,CAAC;AAE3C,aAAW,MAAM,OAAO,OAAO,GAAG;AAChC,UAAM,IAAI,GAAG,MAAM,GAAG,SAAS;AAC/B,UAAM,OAAO,EAAE,WAAW,GAAG,cAAc;AAC3C,UAAM,SAAS,MAAM,KAAK,IAAI,GAAG,EAAE;AAEnC,QAAI,GAAG,SAAS,UAAU;AACxB,eAAS,KAAK,EAAE,OAAO,GAAG,WAAW,IAAI,UAAU,YAAY,GAAG,gBAAgB,OAAO,GAAG,IAAI,QAAQ,OAAO,KAAK,CAAC;AACrH;AAAA,IACF;AAEA,UAAM,QAAQ,GAAG,UAAU;AAC3B,aAAS,KAAK;AAAA,MACZ,OAAO,GAAG;AAAA,MACV,IAAI,WAAW,OAAO,WAAW;AAAA,MACjC,YAAY,GAAG;AAAA,MACf,OAAO,GAAG;AAAA,MACV;AAAA,MACA;AAAA,IACF,CAAC;AAKD,UAAM,WAAW,EAAE,kBAAkB;AACrC,QAAI,CAAC,SAAU;AACf,UAAM,SAAS,SAAS,UAAU,GAAG,cAAc;AACnD,QAAI,OAAO,WAAW,EAAG;AACzB,UAAM,SAAS,EAAE,mBAAmB;AACpC,QAAI,CAAC,OAAQ;AACb,UAAM,OAAO,EAAE,UAAU,QAA0C,OAAO,QAAQ,QAAQ,EAAE,QAAQ,MAAM,EAAE,KAAK;AACjH,QAAI;AACF,YAAM,SAAS,UAAU,GAAG,gBAAgB,OAAkC,IAAI;AAClF,YAAM,EAAE,cAAc,IAAI,MAAM,kBAAkB;AAClD,iBAAW,KAAK,QAAQ;AACtB,cAAM,cAAc,kBAAkB,GAAG,GAAG,IAAI,QAA0C,KAAgC;AAAA,MAC5H;AAAA,IACF,SAAS,KAAK;AACZ,sBAAgB,KAAK;AAAA,QACnB,OAAO,GAAG;AAAA,QACV,YAAY,GAAG;AAAA,QACf,OAAO,GAAG;AAAA,QACV,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MAC1D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,UAAU,gBAAgB;AACrC;;;ACtEO,SAAS,iBAAiB,MAAsD;AACrF,QAAM,aAAa,MAAM,cAAc,CAAC;AACxC,SAAO;AAAA,IACL,gBAAgB,CAAC,IAAI,IAAI,YAAY,eAAe,IAAI,IAAI,SAAS,UAAU;AAAA,IAC/E;AAAA,EACF;AACF;","names":[]}

package/dist/util/index.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-PY4KJPYU.js";
 import {
   FilenameSanitizationError
-} from "../chunk-W2OG6JOL.js";
+} from "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/kernel/util/sanitize-filename.ts

package/dist/{verify-26Y5GNMK.js → verify-7XWHJWUN.js}

@@ -2,10 +2,10 @@ import {
   blindedEqual,
   evaluateKofN,
   openVdigPayload
-} from "./chunk-IY23KFNZ.js";
+} from "./chunk-35NMVJ7I.js";
 import {
   dualReadSealedSlot
-} from "./chunk-N6WF5PKC.js";
+} from "./chunk-NFZGZ4AK.js";
 import {
   VDIG_ITERATIONS,
   normalizeForVerify,
@@ -14,11 +14,11 @@ import {
 import {
   base64ToBuffer,
   generateSalt
-} from "./chunk-HOONYZY2.js";
+} from "./chunk-AKKRXT23.js";
 import {
   ClassifiedConfigError,
   ClassifiedVerifyError
-} from "./chunk-W2OG6JOL.js";
+} from "./chunk-QZWTRENR.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/kernel/enclave/classify/verify.ts
@@ -137,4 +137,4 @@ export {
   verifyDigestField,
   verifyTextField
 };
-//# sourceMappingURL=verify-26Y5GNMK.js.map
+//# sourceMappingURL=verify-7XWHJWUN.js.map

package/dist/via/blob/active.d.ts

@@ -1,22 +1,37 @@
 /**
  * Active blob strategy factory. Calling `blobs()` returns a
- * `BlobStrategy` whose `openSlot` constructs a real `BlobSet` bound
+ * `BlobsStrategy` whose `openSlot` constructs a real `BlobSet` bound
  * to the caller's record. The returned strategy is passed into
- * `createNoydb({ blobStrategy: blobs() })` to light up the
+ * `createNoydb({ blobsStrategy: blobs() })` to light up the
  * `collection.blob(id)` path.
  *
  * This module is only reachable through the `@noy-db/hub/blobs`
  * subpath — a consumer that never imports the subpath ships none of
  * this (ESM tree-shaking + hub's `"sideEffects": false`).
  */
-import type { BlobStrategy } from '../../port/with/blob-strategy.js';
+import type { BlobsStrategy } from '../../port/with/blob-strategy.js';
+import type { BlobPinStore } from '../../with-shape/blobs/blob-pinning.js';
+/** Options for {@link withBlobs} (#808). */
+export interface WithBlobsOptions {
+    /**
+     * Device-local backend for the offline-pin registry + external side-cache
+     * (`collection.blob(id).pin()`, the `cacheBudget` LRU stamps). Default:
+     * in-memory — pins then last one app session. Supply a durable,
+     * DEVICE-LOCAL store (IndexedDB-backed on the web; it must never sync) to
+     * keep pins across restarts. See `BlobPinStore`'s doc for the posture.
+     */
+    readonly pinStore?: BlobPinStore;
+}
 /**
- * Build a default `BlobStrategy` ready to pass into `createNoydb`.
+ * Build a default `BlobsStrategy` ready to pass into `createNoydb`.
  *
  * Named `withBlobs` (plugin-pattern canonical) rather than `blobs` to
  * avoid shadowing the very common local idiom
  * `const blobs = invoices.blob(id)` in user code.
  *
+ * One `withBlobs()` instance owns one device-local pin registry + KPI
+ * counter set (#808) — treat it as "this device's" blob service.
+ *
  * @example
  * ```ts
  * import { createNoydb } from '@noy-db/hub'
@@ -24,11 +39,12 @@ import type { BlobStrategy } from '../../port/with/blob-strategy.js';
  *
  * const db = await createNoydb({
  *   store, user, secret,
- *   blobStrategy: withBlobs(),
+ *   blobsStrategy: withBlobs(),
  * })
  *
  * // Now live — delegates to BlobSet.
- * await db.vault('acme').collection('invoices').blob('inv-1').put('receipt.pdf', bytes)
+ * const vault = await db.openVault('acme')
+ * await vault.collection('invoices').blob('inv-1').put('receipt.pdf', bytes)
  * ```
  */
-export declare function withBlobs(): BlobStrategy;
+export declare function withBlobs(options?: WithBlobsOptions): BlobsStrategy;

package/dist/via/blob/binding.d.ts

@@ -45,7 +45,7 @@ import type { BlobFieldsConfig } from '../../with-shape/blobs/blob-compaction.js
  * DELIBERATELY left unwired by `compileViaBindings` (#629 Task 10, resolved
  * within parity-first — see task-10-report.md "blob purge" section):
  * `per-blob-cek.test.ts`/`forget.test.ts` prove blob-shred-on-forget is
- * gated SOLELY on the vault's `blobStrategy` being configured, never on a
+ * gated SOLELY on the vault's `blobsStrategy` being configured, never on a
  * given collection's OWN `blobFields` declaration (`.blob(id)` is callable,
  * and IS exercised by those tests, on collections with no `blobFields` at
  * all). Routing it exclusively through this binding would silently stop

package/dist/via/blob/index.d.ts

@@ -19,7 +19,11 @@
  * code should prefer this subpath so the import boundary is explicit.
  */
 export { withBlobs } from './active.js';
-export type { BlobStrategy, BlobStrategyOpenArgs } from '../../port/with/blob-strategy.js';
+export type { WithBlobsOptions } from './active.js';
+export type { BlobsStrategy, BlobsStrategyOpenArgs } from '../../port/with/blob-strategy.js';
+export { memoryBlobPinStore, blobPinKey } from '../../with-shape/blobs/blob-pinning.js';
+export type { BlobPinStore, BlobPinEntry, BlobCacheStats } from '../../with-shape/blobs/blob-pinning.js';
+export { BlobOfflineError } from '../../kernel/errors.js';
 export { memoryObjectProjection } from '../../with-shape/blobs/object-projection.js';
 export type { ObjectProjection, ObjectMeta, ObjectListEntry, PutObjectOptions, ObjectUrlOptions, PutUrlOptions, } from '../../with-shape/blobs/object-projection.js';
 export { importExternalObjects } from '../../with-shape/blobs/import-external.js';
@@ -32,3 +36,5 @@ export { runCompaction, BLOB_EVICTION_AUDIT_COLLECTION } from '../../with-shape/
 export type { BlobFieldsConfig, BlobFieldPolicy, BlobEvictionEntry, CompactRunOptions, CompactionResult, CompactionContext, } from '../../with-shape/blobs/blob-compaction.js';
 export { createExportBlobsHandle, ExportBlobsAbortedError, EXPORT_AUDIT_COLLECTION, } from '../../with-shape/blobs/export-blobs.js';
 export type { ExportBlobsOptions, ExportedBlob, ExportBlobsHandle, ExportBlobsAuditEntry, } from '../../with-shape/blobs/export-blobs.js';
+/** The un-opted-in stub for this service — exported so callers can compare against it (#844). */
+export { NO_BLOBS } from '../../port/with/blob-strategy.js';

package/dist/via/i18n/core.d.ts

@@ -110,7 +110,7 @@ export interface I18nTextOptions {
      * the lenient `'substitute'`). The `mv` layer fires for materialized views
      * that declare `{ i18nLocale, i18nFields }` — UNION (group-key i18n fields
      * resolve before the unified-row bucketing) and query-form (resolved in
-     * `GroupedAggregation.run` before `groupAndReduce`); grouping a raw i18n field
+     * `GroupedReduction.run` before `groupAndReduce`); grouping a raw i18n field
      * without a locale throws. The `join` layer resolves a joined right-side i18n
      * field to the query locale (`toArray({ locale })` or the vault default; raw
      * when locale-less). The `export` layer fires for

package/dist/via/i18n/index.d.ts

@@ -19,3 +19,5 @@ export type { ScriptWarning } from './script.js';
 export { withI18n } from './active.js';
 export type { I18nStrategy } from './strategy.js';
 export { ReservedCollectionNameError, DictKeyMissingError, DictKeyInUseError, MissingTranslationError, LocaleNotSpecifiedError, TranslatorNotConfiguredError, ScriptViolationError, StaticDictReadonlyError, UnknownDictCodeError, } from '../../kernel/errors.js';
+/** The un-opted-in stub for this service — exported so callers can compare against it (#844). */
+export { NO_I18N } from '../../port/with/i18n-strategy.js';

package/dist/via/money/money-reducer.d.ts

@@ -22,7 +22,7 @@
  * exactly like the generic reducers they replace.
  */
 import type { MoneyDescriptor } from './descriptor.js';
-import type { AggregateSpec } from '../../with-lookup/aggregate/aggregation.js';
+import type { ReduceSpec } from '../../with-lookup/reduce/reduction.js';
 export type FxRates = Record<string, number | string>;
 /**
  * Rewrite any `sum` / `min` / `max` reducer over a declared money field
@@ -30,4 +30,4 @@ export type FxRates = Record<string, number | string>;
  * reducers over non-money fields) pass through unchanged. Returns a new
  * spec; the input is not mutated.
  */
-export declare function wrapMoneyReducers(spec: AggregateSpec, moneyFields: Record<string, MoneyDescriptor>): AggregateSpec;
+export declare function wrapMoneyReducers(spec: ReduceSpec, moneyFields: Record<string, MoneyDescriptor>): ReduceSpec;

package/dist/walk-P5D6CF4V.js

@@ -0,0 +1,21 @@
+import {
+  dumpVaultSchema
+} from "./chunk-3V3XR4S4.js";
+import "./chunk-VYYM3MEN.js";
+import "./chunk-6ZNSB3H6.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-DMH3VZU5.js";
+import "./chunk-G2JUIDFA.js";
+import "./chunk-W3L64Y3J.js";
+import "./chunk-35NMVJ7I.js";
+import "./chunk-NFZGZ4AK.js";
+import "./chunk-QJNCB5SK.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AKKRXT23.js";
+import "./chunk-QBAC3GXA.js";
+import "./chunk-QZWTRENR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  dumpVaultSchema
+};
+//# sourceMappingURL=walk-P5D6CF4V.js.map

package/dist/with-audit/consent/index.d.ts

@@ -12,3 +12,5 @@ export { withConsent } from './active.js';
 export type { ConsentStrategy } from './strategy.js';
 export { CONSENT_AUDIT_COLLECTION, writeConsentEntry, loadConsentEntries, } from './consent.js';
 export type { ConsentContext, ConsentOp, ConsentAuditEntry, ConsentAuditFilter, } from './consent.js';
+/** The un-opted-in stub for this service — exported so callers can compare against it (#844). */
+export { NO_CONSENT } from './strategy.js';

package/dist/with-audit/forget/active.d.ts

@@ -1,5 +1,5 @@
 /**
- * `withForgetCascade` — the active factory for GDPR right-to-erasure via
+ * `withForget` — the active factory for GDPR right-to-erasure via
  * per-record CEK crypto-shred. Mirrors the canonical
  * `strategy.ts` (type + `NO_FORGET` sentinel) / `active.ts` (factory) split
  * used by the other services.
@@ -22,10 +22,10 @@ import type { SubjectDeclaration, ForgetStrategy } from './strategy.js';
  * ```ts
  * createNoydb({
  *   secret, user,
- *   forgetStrategy: withForgetCascade({ subjects: { invoices: 'buyerId' } }),
+ *   forgetStrategy: withForget({ subjects: { invoices: 'buyerId' } }),
  * })
  * const result = await vault.forget('buyer-123')
  * // → { subject, recordsShredded, historyVersionsShredded, collections, … }
  * ```
  */
-export declare function withForgetCascade(opts: SubjectDeclaration): ForgetStrategy;
+export declare function withForget(opts: SubjectDeclaration): ForgetStrategy;

package/dist/with-audit/forget/index.d.ts

@@ -1,17 +1,18 @@
 /**
  * `@noy-db/hub/forget` — GDPR right-to-erasure via per-record CEK crypto-shred.
- * Import `withForgetCascade` and pass it to `createNoydb`:
+ * Import `withForget` and pass it to `createNoydb`:
  *
  * ```ts
  * import { createNoydb } from '@noy-db/hub'
- * import { withForgetCascade } from '@noy-db/hub/forget'
+ * import { withForget } from '@noy-db/hub/forget'
  *
  * const db = createNoydb({
  *   secret, user,
  *   historyStrategy: withHistory(),               // ledger for the erasure proof
- *   forgetStrategy: withForgetCascade({ subjects: { invoices: 'buyerId' } }),
+ *   forgetStrategy: withForget({ subjects: { invoices: 'buyerId' } }),
  * })
- * const result = await db.vault('main').forget('buyer-123')
+ * const vault = await db.openVault('main')
+ * const result = await vault.forget('buyer-123')
  * ```
  *
  * The erasure flow (`vault.forget`), the subject-index maintenance hooks, and
@@ -21,7 +22,7 @@
  *
  * @module
  */
-export { withForgetCascade } from './active.js';
+export { withForget } from './active.js';
 export { NO_FORGET } from './strategy.js';
 export type { SubjectDeclaration, ForgetStrategy, ForgetResult, ScopedPurgeResidueNotice, } from './strategy.js';
 export type { SubjectRef } from './subject-index.js';

package/dist/with-audit/forget/strategy.d.ts

@@ -1,5 +1,5 @@
 /**
- * `withForgetCascade` — declaration surface for GDPR right-to-erasure via
+ * `withForget` — declaration surface for GDPR right-to-erasure via
  * per-record CEK crypto-shred.
  *
  * This file holds only the *declaration* shape and the disabled sentinel.
@@ -18,12 +18,12 @@
  */
 import type { LedgerEntry } from '../../with-commit/history/ledger/entry.js';
 /**
- * User-supplied declaration passed to {@link withForgetCascade}. Maps a
+ * User-supplied declaration passed to {@link withForget}. Maps a
  * collection name to the record field (dotted path supported, e.g.
  * `'billing.buyerId'`) that identifies the data subject for erasure.
  *
  * ```ts
- * withForgetCascade({ subjects: { invoices: 'buyerId', contacts: 'id' } })
+ * withForget({ subjects: { invoices: 'buyerId', contacts: 'id' } })
  * ```
  */
 export interface SubjectDeclaration {

package/dist/with-audit/guards/executor.d.ts

@@ -1,6 +1,6 @@
-import type { GuardStrategy, GuardContext, GuardChange } from './types.js';
+import type { GuardSpec, GuardContext, GuardChange } from './types.js';
 /**
- * Pure functions that execute the work declared by a `GuardStrategy`.
+ * Pure functions that execute the work declared by a `GuardSpec`.
  * Stateless — `GuardRegistry` decides when to call these.
  *
  * @internal
@@ -17,10 +17,10 @@ export declare const GuardExecutor: {
      *   `existing[field]` vs `incoming[field]` would always look like a
      *   change even when the computed result is unchanged.
      */
-    checkFrozenFields<T extends Record<string, unknown>>(guard: GuardStrategy<T>, id: string, existing: T | null, incoming: T, skipFields?: ReadonlySet<string>): Promise<void>;
+    checkFrozenFields<T extends Record<string, unknown>>(guard: GuardSpec<T>, id: string, existing: T | null, incoming: T, skipFields?: ReadonlySet<string>): Promise<void>;
     /**
      * Run a single guard's invariant over its slice of the change-set.
      * Any throw is converted to `InvariantError` unless it already is one.
      */
-    runInvariant<T extends Record<string, unknown>>(guard: GuardStrategy<T>, changes: ReadonlyArray<GuardChange<T>>, ctx: GuardContext<T>): Promise<void>;
+    runInvariant<T extends Record<string, unknown>>(guard: GuardSpec<T>, changes: ReadonlyArray<GuardChange<T>>, ctx: GuardContext<T>): Promise<void>;
 };

package/dist/with-audit/guards/immutable-guard.d.ts

@@ -25,7 +25,7 @@
  * ledgered by the guard amendment mechanism). `appendOnly: true` is
  * shorthand for `after: () => true` — immutable from creation.
  */
-import type { GuardStrategyHandle, GuardContext, GuardChange } from './types.js';
+import type { GuardStrategy, GuardContext, GuardChange } from './types.js';
 export interface ImmutableGuardConfig<T extends Record<string, unknown>> {
     /** The collection to make WORM. */
     collection: string;
@@ -42,7 +42,7 @@ export interface ImmutableGuardConfig<T extends Record<string, unknown>> {
     amendmentRoles?: ReadonlyArray<'admin' | 'owner'>;
     /**
      * Optional set-level invariant run over the amendment change-set after
-     * the writes execute. Signature matches `GuardStrategy.amendment.invariant`
+     * the writes execute. Signature matches `GuardSpec.amendment.invariant`
      * exactly: it receives every {before, after} pair touching this
      * collection in the amendment plus the guard context; throwing reverts
      * the whole amendment and surfaces as `InvariantError`.
@@ -60,4 +60,4 @@ export interface ImmutableGuardConfig<T extends Record<string, unknown>> {
  * Build an immutability guard. Pass the returned handle to
  * `createNoydb({ guardStrategies: [...] })`.
  */
-export declare function immutableGuard<T extends Record<string, unknown>>(config: ImmutableGuardConfig<T>): GuardStrategyHandle<T>;
+export declare function immutableGuard<T extends Record<string, unknown>>(config: ImmutableGuardConfig<T>): GuardStrategy<T>;

package/dist/with-audit/guards/index.d.ts

@@ -6,5 +6,5 @@ export type { TransitionGuardConfig } from './transition-guard.js';
 export { GuardRegistry } from './registry.js';
 export { GuardExecutor } from './executor.js';
 export { ReadOnlyVaultFacade } from './read-only-facade.js';
-export type { GuardStrategy, GuardStrategyHandle, GuardContext, GuardChange, } from './types.js';
+export type { GuardSpec, GuardStrategy, GuardContext, GuardChange, } from './types.js';
 export { RecordLockedError, FieldFrozenError, IllegalTransitionError, InvariantError, AmendmentForbiddenError, } from '../../kernel/errors.js';

package/dist/with-audit/guards/registry.d.ts

@@ -1,4 +1,4 @@
-import type { GuardStrategy, GuardContext, GuardChange } from './types.js';
+import type { GuardSpec, GuardContext, GuardChange } from './types.js';
 /**
  * Per-record metadata attached to every entry in an amendment's
  * change-set. Carried in a parallel map alongside `_amendmentChanges`
@@ -20,14 +20,14 @@ export interface AmendmentChangeMeta {
  *
  * @internal
  */
-type AnyGuard = GuardStrategy<Record<string, unknown>>;
+type AnyGuard = GuardSpec<Record<string, unknown>>;
 type AnyChange = GuardChange<Record<string, unknown>>;
 export declare class GuardRegistry {
     private readonly _byCollection;
     private _amendmentChanges;
     private _amendmentMeta;
     /** Register a guard. Multiple guards per collection are allowed. */
-    register<T extends Record<string, unknown>>(spec: GuardStrategy<T>): void;
+    register<T extends Record<string, unknown>>(spec: GuardSpec<T>): void;
     /** All guards registered against `collection` in registration order. */
     guardsFor(collection: string): ReadonlyArray<AnyGuard>;
     /** Per-collection guard counts, for introspection. */

package/dist/with-audit/guards/transition-guard.d.ts

@@ -42,7 +42,7 @@
  *
  * The status graph is caller-supplied data — no UI, no domain logic.
  */
-import type { GuardStrategyHandle, GuardContext, GuardChange } from './types.js';
+import type { GuardStrategy, GuardContext, GuardChange } from './types.js';
 export interface TransitionGuardConfig<T extends Record<string, unknown>> {
     /** The collection whose state field is governed. */
     collection: string;
@@ -68,7 +68,7 @@ export interface TransitionGuardConfig<T extends Record<string, unknown>> {
     amendmentRoles?: ReadonlyArray<'admin' | 'owner'>;
     /**
      * Optional set-level invariant run over the amendment change-set after
-     * the writes execute. Signature matches `GuardStrategy.amendment.invariant`
+     * the writes execute. Signature matches `GuardSpec.amendment.invariant`
      * exactly. When omitted the amendment is unconditionally allowed (the
      * amendment itself is the sanctioned, ledgered override) — the
      * backward-compatible default. Mirrors {@link immutableGuard}.
@@ -79,4 +79,4 @@ export interface TransitionGuardConfig<T extends Record<string, unknown>> {
  * Build a state-machine transition guard. Pass the returned handle to
  * `createNoydb({ guardStrategies: [...] })`.
  */
-export declare function transitionGuard<T extends Record<string, unknown>>(config: TransitionGuardConfig<T>): GuardStrategyHandle<T>;
+export declare function transitionGuard<T extends Record<string, unknown>>(config: TransitionGuardConfig<T>): GuardStrategy<T>;