@noy-db/hub 0.4.0-pre.2 → 0.4.0-pre.4

package/dist/kernel/enclave/index.d.ts

@@ -54,7 +54,7 @@
  * every consumer regardless of which enclave is wired in. noy-db's own
  * enclave supports every group, so it never throws this error.
  */
-export type { EnclaveKey } from './crypto.js';
+export type { EnclaveKey, EncryptResult } from './crypto.js';
 export { encrypt, decrypt, encryptBytes, decryptBytes, encryptBytesWithAAD, decryptBytesWithAAD, encryptDeterministic, decryptDeterministic, sha256Hex, hmacSha256Hex, } from './crypto.js';
 export { deriveKey, derivePassphraseKey, generateDEK, generateSalt, generateIV, wrapKey, unwrapKey, bufferToBase64, base64ToBuffer, derivePresenceKey, deriveDeterministicKey, deriveSealedFieldKey, deriveSealedFieldKeyFromCek, wrapCek, unwrapCek, importCek, } from './crypto.js';
 export type { PassphraseKeyUsage } from './crypto.js';

package/dist/kernel/noydb.d.ts

@@ -84,21 +84,20 @@ export declare class Noydb {
     private writeRelay;
     /** Per-vault policy enforcers. */
     private readonly policyEnforcers;
-    private readonly txStrategy;
-    private readonly forgetStrategy;
     /**
-     * Opt-in sovereign-custody (FR-6) strategy — `NO_CUSTODY` (throwing) unless
-     * `withCustody()` was passed. Public so `Vault` routes `vault.custody.liberate`
-     * through it; grant/revoke route through it from this class. @internal
+     * Every opt-in service, resolved once (#838). Shared by reference with each
+     * `Vault` this instance opens and, through them, every `Collection` — so
+     * there is exactly one resolution and no construction path can disagree
+     * about which services are enabled (the #834 bug class).
      */
-    readonly custodyStrategy: CustodyStrategy;
+    private readonly strategies;
     /**
-     * Opt-in multi-user team strategy (#267 keyring-grant → team split) —
-     * `NO_TEAM` (throwing) unless `withTeam()` was passed; the keyring
-     * engines are linked only by the active strategy, not by this file. */
-    private readonly teamStrategy;
-    private readonly sessionStrategy;
-    private readonly syncStrategy;
+     * Opt-in sovereign-custody (FR-6) strategy — `NO_CUSTODY` (throwing) unless
+     * `withCustody()` was passed. Kept as a public accessor because `Vault`
+     * routes `vault.custody.liberate` through `this.noydb.custodyStrategy`.
+     * @internal
+     */
+    get custodyStrategy(): CustodyStrategy;
     private readonly snapshots;
     private readonly policyManager;
     /** Pre-resolved policy-gate engine function (mirrors `coordinationProvider`/`userApiFactory` above). */
@@ -151,7 +150,19 @@ export declare class Noydb {
         create?: boolean;
         meta?: VaultMeta;
     }): Promise<Vault>;
-    /** Synchronous vault access (must call openVault first, or auto-opens). */
+    /**
+     * Synchronous access to an ALREADY-OPEN vault.
+     *
+     * Returns the instance `openVault()` produced, or throws — it never
+     * constructs. It used to fall back to building a Vault itself (once for
+     * plaintext, once for encrypted-with-cached-keyring), and those copies
+     * drifted from the real open path: the encrypted one silently omitted six
+     * strategies, so a vault reached this way threw `*NotEnabledError` for
+     * services the caller had configured (#834). Both fallbacks also skipped
+     * the async registry init and schema-fence snapshot that `openVault`
+     * performs, which a synchronous method cannot await. One construction
+     * path is the only way that divergence stays fixed.
+     */
     vault(name: string): Vault;
     /**
      * Grant access to a user for a vault.

package/dist/kernel/vault.d.ts

@@ -1,3 +1,4 @@
+import type { StrategyBag } from '../port/with/strategies.js';
 import type { NoydbStore, EncryptedEnvelope, HistoryConfig, ExportStreamOptions, ExportChunk, CollectionConflictResolver, CrossTierAccessEvent, TierMode, Role, VaultUserApi } from './types.js';
 import type { Noydb } from './noydb.js';
 import type { IssueDelegationOptions, DelegationToken } from '../with-party/team/delegation.js';
@@ -6,7 +7,6 @@ import type { CacheOptions } from './collection.js';
 import type { JoinableSource } from './query/index.js';
 import type { OnDirtyCallback } from './collection.js';
 import type { UnlockedKeyring, BundleRecipient } from '../with-party/team/keyring.js';
-import { type PortabilityStrategy } from '../with-audit/portability/strategy.js';
 import type { MaterializedViewRegistry } from '../with-formula/materialized-views/registry.js';
 import type { MaterializedViewStrategyHandle } from '../with-formula/materialized-views/types.js';
 import type { OverlayedViewRegistry } from '../with-formula/overlay-views/registry.js';
@@ -16,32 +16,20 @@ import type { ExportFormat, KeyringFile, SensitiveOpt, IndexFieldName, IndexDefF
 import { ElevatedHandle } from '../with-commit/tx/elevated-handle.js';
 import type { NoydbEventEmitter } from './events.js';
 import type { StandardSchemaV1 } from './schema.js';
-import type { BlobStrategy } from '../port/with/blob-strategy.js';
 import type { ObjectProjection } from '../with-shape/blobs/object-projection.js';
-import type { ArchiveStrategy } from '../with-fork/archive/index.js';
 import type { ArchivePolicy, ArchiveResult, ArchiveRunOptions } from '../with-fork/archive/index.js';
 import { type SequenceHandle, type FormattedSequenceHandle, type SequenceOptions } from '../with-commit/sequence/index.js';
-import { type SequenceStrategy } from '../with-commit/sequence/strategy.js';
 import { type Assignment } from '../with-commit/numbering/index.js';
 import type { DeferredNumberingConfig } from '../with-commit/numbering/descriptor.js';
-import type { IndexStrategy } from '../with-lookup/indexing/strategy.js';
-import type { LazyStrategy } from '../port/with/lazy-strategy.js';
-import type { AggregateStrategy } from '../with-lookup/aggregate/strategy.js';
-import type { CrdtStrategy } from './types.js';
-import type { TiersStrategy, TierMoveResult } from '../with-audit/tiers/strategy.js';
-import type { SearchStrategy } from '../with-lookup/search/strategy.js';
+import type { TierMoveResult } from '../with-audit/tiers/strategy.js';
 import { type CargoStrategy } from '../with-cargo/strategy.js';
-import { type BrokerStrategy, type CredentialBrokerHandle } from '../port/with/broker-strategy.js';
+import { type CredentialBrokerHandle } from '../port/with/broker-strategy.js';
 import type { LedgerStore } from '../with-commit/history/ledger/store.js';
 import type { VaultInstant } from '../with-commit/history/time-machine.js';
-import { type HistoryStrategy } from '../with-commit/history/strategy.js';
-import { type ForgetStrategy, type ForgetResult } from '../with-audit/forget/strategy.js';
+import { type ForgetResult } from '../with-audit/forget/strategy.js';
 import { type SubjectRef } from '../with-audit/forget/subject-index.js';
 import type { VaultFrame } from '../with-fork/shadow/vault-frame.js';
-import { type ShadowStrategy } from '../with-fork/shadow/strategy.js';
 import type { ConsentContext, ConsentAuditEntry, ConsentAuditFilter, ConsentOp } from '../with-audit/consent/consent.js';
-import { type ConsentStrategy } from '../with-audit/consent/strategy.js';
-import { type PeriodsStrategy } from '../with-audit/periods/strategy.js';
 import { type RefDescriptor, type RefViolation } from './refs.js';
 import type { DictionaryHandle, DictionaryOptions, DictKeyDescriptor, StaticDictDescriptor } from '../port/with/i18n-strategy.js';
 import { // #653
@@ -49,11 +37,10 @@ type LookupDescriptor } from '../port/with/lookup-strategy.js';
 import { type LinkSpec, type LinkSetHandle } from '../with-shape/links/names.js';
 import type { EmbeddingDescriptor } from '../with-lookup/embeddings/index.js';
 import type { ComputedFields } from '../with-formula/computed/index.js';
-import { type I18nStrategy, type I18nTextDescriptor } from '../port/with/i18n-strategy.js';
+import { type I18nTextDescriptor } from '../port/with/i18n-strategy.js';
 import { type ViaFieldSpec } from './via/compose.js';
 import { ViaGraph } from './via/graph.js';
 import { type RollupDeleteIntent } from './via/dispatch.js';
-import { type SyncStrategy } from '../with-party/team/sync-strategy.js';
 import type { GuardRegistry } from '../with-audit/guards/registry.js';
 import type { GuardStrategyHandleAny } from '../with-audit/guards/types.js';
 import type { ReadOnlyVaultFacade } from '../with-audit/guards/read-only-facade.js';
@@ -73,13 +60,11 @@ import { SchemaFenceController } from '../with-shape/schema-update/fence-control
 import { type FenceDoc } from '../with-shape/schema-update/fence.js';
 import type { SchemaUpdateStrategy } from '../with-shape/schema-update/types.js';
 import type { AttestationFieldSchema, RevocationList } from '@noy-db/attestation';
-import { type AttestationStrategy } from '../with-audit/attestation/vault-facade.js';
-import { type SealedRecordStrategy } from '../with-audit/sealed-record/strategy.js';
 import type { DumpSchemaOptions, VaultSchemaSnapshot, SchemaIntrospection } from '../with-shape/introspection/types.js';
 import type { VaultIntrospectState } from '../with-shape/introspection/walk.js';
 import type { FieldMeta } from '../with-shape/introspection/field-meta.js';
 import type { CollectionMeta, VaultMeta } from '../with-shape/introspection/meta.js';
-import { type ClassifiedEntry, type ClassifiedStrategy } from '../port/with/classified-strategy.js';
+import { type ClassifiedEntry } from '../port/with/classified-strategy.js';
 /** A vault (tenant namespace) containing collections. */
 export declare class Vault {
     #private;
@@ -99,36 +84,20 @@ export declare class Vault {
     private readonly syncAdapter;
     private readonly getPurgeableTargets;
     private readonly historyConfig;
-    /** tree-shake seam for the optional blob service; `undefined` means "blobs are off for this
-     *  vault" — every `collection.blob(id)` call throws with a pointer at `@noy-db/hub/blobs`. */
-    private readonly blobStrategy;
+    /**
+     * Every opt-in service, resolved once by `createNoydb` (#838). Shared by
+     * reference with the owning `Noydb` and with every `Collection` this vault
+     * opens, so all three always agree about which services are enabled.
+     */
+    private readonly strategies;
     private readonly objectStore;
-    /** Cold-storage archival strategy (the archive target store). */
-    private readonly archiveStrategy;
     /** Per-collection record archival policies. Indexed by collection name. */
     private readonly archiveRegistry;
-    private readonly indexStrategy;
-    private readonly lazyStrategy;
-    private readonly aggregateStrategy;
-    private readonly crdtStrategy;
-    private readonly tiersStrategy;
-    private readonly searchStrategy;
-    /** Cargo (partition extraction) strategy — `NO_CARGO` (throwing) unless `withCargo()` was passed.
-     *  Public so the `extractPartition` free function (which takes a `Vault`) routes through it. */
-    readonly cargoStrategy: CargoStrategy;
-    private readonly brokerStrategy;
-    private readonly sealedRecordStrategy;
-    private readonly portabilityStrategy;
-    private readonly sequenceStrategy;
-    private readonly consentStrategy;
     private readonly periods;
     private readonly linksEnforcer;
-    private readonly shadowStrategy;
-    private readonly historyStrategy;
-    private readonly forgetStrategy;
-    private readonly i18nStrategy;
-    private readonly syncStrategy;
-    private readonly classifiedStrategy;
+    /** Cargo (partition extraction) strategy — `NO_CARGO` (throwing) unless `withCargo()` was passed.
+     *  Public so the `extractPartition` free function (which takes a `Vault`) routes through it. */
+    get cargoStrategy(): CargoStrategy;
     /** Per-vault guard registry; `null` until `_initGuards()` runs (or for vaults that never register
      *  one) — the runtime class is dynamic-imported on demand to keep it out of the floor bundle. */
     private guardRegistry;
@@ -317,31 +286,15 @@ export declare class Vault {
          * `undefined` => every `collection.blob(id)` throws with a pointer
          * at `@noy-db/hub/blobs`.
          */
-        blobStrategy?: BlobStrategy | undefined;
+        /**
+         * Every opt-in service, already resolved by `createNoydb` (#838). Not
+         * optional: a Vault cannot be built without it, which is what makes the
+         * partially-populated construction path of #834 unrepresentable.
+         */
+        strategies: StrategyBag;
         objectStore?: ObjectProjection | undefined;
-        archiveStrategy?: ArchiveStrategy | undefined;
-        indexStrategy?: IndexStrategy | undefined;
-        lazyStrategy?: LazyStrategy | undefined;
-        aggregateStrategy?: AggregateStrategy | undefined;
-        crdtStrategy?: CrdtStrategy | undefined;
-        tiersStrategy?: TiersStrategy | undefined;
-        searchStrategy?: SearchStrategy | undefined;
-        cargoStrategy?: CargoStrategy | undefined;
-        brokerStrategy?: BrokerStrategy | undefined;
-        consentStrategy?: ConsentStrategy | undefined;
-        periodsStrategy?: PeriodsStrategy | undefined;
-        shadowStrategy?: ShadowStrategy | undefined;
-        historyStrategy?: HistoryStrategy | undefined;
-        i18nStrategy?: I18nStrategy | undefined;
-        syncStrategy?: SyncStrategy | undefined;
         guardStrategies?: ReadonlyArray<GuardStrategyHandleAny> | undefined;
         numberingConfigs?: ReadonlyArray<DeferredNumberingConfig> | undefined;
-        forgetStrategy?: ForgetStrategy | undefined;
-        attestationStrategy?: AttestationStrategy | undefined;
-        classifiedStrategy?: ClassifiedStrategy | undefined;
-        sealedRecordStrategy?: SealedRecordStrategy | undefined;
-        portabilityStrategy?: PortabilityStrategy | undefined;
-        sequenceStrategy?: SequenceStrategy | undefined;
         /** Vault-level descriptive metadata — set once at construction (first-wins). */
         meta?: VaultMeta | undefined;
     });

package/dist/{liberate-W5MDWYOV.js → liberate-FK7JI2QX.js}

@@ -1,12 +1,12 @@
 import {
   liberateVault
-} from "./chunk-S3OYXPSE.js";
+} from "./chunk-HKR25MGX.js";
 import "./chunk-BCOKZC4B.js";
 import "./chunk-XULHFSHO.js";
 import "./chunk-25ZDB25Z.js";
 import "./chunk-MEKAMERX.js";
 import "./chunk-BVZGNMVM.js";
-import "./chunk-HVZT5T22.js";
+import "./chunk-WJDYZP3U.js";
 import "./chunk-7B4GPCX7.js";
 import "./chunk-PEY6ZTCF.js";
 import "./chunk-QXPOEAKR.js";
@@ -21,4 +21,4 @@ import "./chunk-PZ5AY32C.js";
 export {
   liberateVault
 };
-//# sourceMappingURL=liberate-W5MDWYOV.js.map
+//# sourceMappingURL=liberate-FK7JI2QX.js.map

package/dist/materialized-views/index.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-OOTTXUNV.js";
 import {
   MaterializedViewExecutor
-} from "../chunk-TYBXP6WE.js";
+} from "../chunk-QYJIOWKN.js";
 import "../chunk-HGVFJL63.js";
 import {
   MaterializedViewRegistry,
@@ -17,9 +17,9 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "../chunk-OGY4ELVE.js";
+} from "../chunk-3XVOLB75.js";
 import "../chunk-OGFPMCSP.js";
-import "../chunk-RI3OKC3Y.js";
+import "../chunk-JIMEB4C6.js";
 import "../chunk-IGJCYUT5.js";
 import "../chunk-BZEPJJOK.js";
 import "../chunk-XGVDLQJE.js";

package/dist/{noydb-U63S3Z7F.js → noydb-N5IW6OFZ.js}

@@ -1,24 +1,24 @@
 import {
   Noydb,
   createNoydb
-} from "./chunk-VZELV7ZJ.js";
+} from "./chunk-W7TCXZWU.js";
 import "./chunk-VYYM3MEN.js";
 import "./chunk-NOT7XA7Q.js";
 import "./chunk-QDNVHA2F.js";
 import "./chunk-IUIVDVXM.js";
 import "./chunk-L4OA7G5T.js";
 import "./chunk-JA5B3SLH.js";
-import "./chunk-J6U4BOKP.js";
+import "./chunk-JW3XCZA2.js";
 import "./chunk-EDC6MLXV.js";
 import "./chunk-GYGLAVCX.js";
-import "./chunk-A64XXIIB.js";
+import "./chunk-U73LHVPF.js";
 import "./chunk-BCOKZC4B.js";
 import "./chunk-AURFOK3D.js";
-import "./chunk-RGL53NXZ.js";
+import "./chunk-WEC3JGBA.js";
 import "./chunk-KMONEHDJ.js";
 import "./chunk-XW7NWO4A.js";
 import "./chunk-IZX3WZBF.js";
-import "./chunk-IU22SQGU.js";
+import "./chunk-5KI3REO3.js";
 import "./chunk-GYB2QK5H.js";
 import "./chunk-KR5EGWI4.js";
 import "./chunk-GHVIKOHT.js";
@@ -26,20 +26,20 @@ import "./chunk-FLHOTGOO.js";
 import "./chunk-E2R5NRZD.js";
 import "./chunk-HGVFJL63.js";
 import "./chunk-2ITLQZV5.js";
-import "./chunk-OTU5ZI3U.js";
+import "./chunk-4X6DJZHY.js";
 import "./chunk-OGFPMCSP.js";
 import "./chunk-2KL6NDD4.js";
 import "./chunk-CGPO3ZYB.js";
 import "./chunk-KPZS5QAQ.js";
 import "./chunk-NO272T7Q.js";
-import "./chunk-RI3OKC3Y.js";
+import "./chunk-JIMEB4C6.js";
 import "./chunk-IGJCYUT5.js";
 import "./chunk-25G7U6RD.js";
 import "./chunk-BZEPJJOK.js";
 import "./chunk-XGVDLQJE.js";
 import "./chunk-STR7WBOB.js";
-import "./chunk-4JYYIFHW.js";
-import "./chunk-HVZT5T22.js";
+import "./chunk-QUIG6BZT.js";
+import "./chunk-WJDYZP3U.js";
 import "./chunk-7B4GPCX7.js";
 import "./chunk-3O62PVDW.js";
 import "./chunk-VQNJ7UZL.js";
@@ -67,4 +67,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=noydb-U63S3Z7F.js.map
+//# sourceMappingURL=noydb-N5IW6OFZ.js.map

package/dist/port/with/archive-strategy.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Strategy seam between the kernel spine and the optional archive service
+ * (#838 — precedent: `port/with/blob-strategy.ts`). Lives on the `/with`
+ * port so `Vault` can hold the `NO_ARCHIVE` default without a
+ * spine→service static import.
+ *
+ * `archiveStrategy` was the one service with no NO-op stub: the spine held
+ * it as `ArchiveStrategy | undefined` and hand-rolled a null gate before
+ * every use. That made it the sole exception to the strategy-bag's "every
+ * key always resolves" rule (#838), so the stub exists to remove the
+ * exception rather than to add a capability.
+ *
+ * `ArchiveStrategy`'s only member is a live cold `NoydbStore`, and there is
+ * no meaningful no-op store — so the stub throws on access instead of
+ * standing in. That reproduces the previous gate exactly: `_archiveContext()`
+ * read `strategy.store` immediately after its null check, so the throw lands
+ * in the same call with the same message.
+ *
+ * The `ArchiveStrategy` import is TYPE-ONLY and therefore erased — importing
+ * it does not pull `with-fork/archive/index.js`'s runtime re-exports of the
+ * relocation engine.
+ *
+ * @internal
+ */
+import type { ArchiveStrategy } from '../../with-fork/archive/index.js';
+/**
+ * The un-opted-in archive strategy. Reading `.store` throws with a pointer
+ * at the `withArchive()` factory — the archive service has no degraded mode
+ * to fall back to.
+ */
+export declare const NO_ARCHIVE: ArchiveStrategy;

package/dist/port/with/strategies.d.ts

@@ -0,0 +1,134 @@
+/**
+ * The strategy bag (#838) — one resolved, immutable record of every opt-in
+ * service, built once in `createNoydb` and carried by reference down the
+ * spine: `Noydb` → `Vault` → `Collection`.
+ *
+ * ## Why this exists
+ *
+ * Threading one service through the spine used to cost ~10 mechanical edits
+ * with no logic in any of them: a field on `NoydbOptions`, a conditional
+ * spread at the `new Vault(` site, a field declaration + constructor
+ * parameter + constructor assignment on `Vault`, a forwarding spread into
+ * the collection options, a field + `?? NO_*` default in
+ * `collection-config.ts`, and a field + assignment on `Collection`. Nothing
+ * checked that a new service reached every layer, which is exactly how #834
+ * happened — one of three copies of the Vault option block had silently
+ * dropped six strategies, and a vault reached that way threw
+ * `*NotEnabledError` for services the caller had actually configured.
+ *
+ * Here the layers hold ONE field. Adding a service is a row in
+ * {@link StrategyBag} plus a row in {@link STRATEGY_DEFAULTS} — both in this
+ * file, and omitting either is a compile error rather than a bug that only
+ * shows up through one construction path.
+ *
+ * ## Every key always resolves
+ *
+ * There is no `undefined` in the bag. An un-opted-in service resolves to its
+ * `NO_*` stub, which is the tree-shake seam: the stubs are deliberately tiny
+ * modules on the `/with` port that the spine may import statically, while the
+ * real implementation arrives only when the consumer imports the service's
+ * subpath. Holding a stub costs a few hundred bytes; it does not pull the
+ * machinery in.
+ *
+ * Two services needed adjusting to fit that rule, both recorded here because
+ * the reasons are not obvious:
+ *
+ *  - `archive` had no stub at all and was held as `ArchiveStrategy |
+ *    undefined` behind a hand-rolled null gate. {@link NO_ARCHIVE} now stands
+ *    in and throws on `.store` access — see `port/with/archive-strategy.ts`.
+ *  - `lazy`'s floor is {@link IMPLICIT_LAZY}, not a no-op: an un-opted-in
+ *    collection still gets a working LRU, it just warns. So its default row
+ *    is a real strategy, which is why this table maps keys to defaults rather
+ *    than assuming a `NO_*` naming convention.
+ *
+ * `coordinationStrategy` is deliberately NOT in the bag. It is a
+ * `CoordinationProvider`, not a service strategy — it has no `with*()`
+ * factory, no `NO_*` stub, and is resolved asynchronously from the store
+ * (`createDefaultCoordinationProvider`) rather than passed through. The
+ * completeness assertion at the bottom of this file excludes it by name so
+ * that the exclusion is explicit and survives future edits.
+ *
+ * @internal
+ */
+import type { NoydbOptions } from '../../kernel/types.js';
+import { type AggregateStrategy } from '../../with-lookup/aggregate/strategy.js';
+import { type AttestationStrategy } from '../../with-audit/attestation/strategy.js';
+import { type BlobStrategy } from './blob-strategy.js';
+import { type BrokerStrategy } from './broker-strategy.js';
+import { type CargoStrategy } from '../../with-cargo/strategy.js';
+import { type ClassifiedStrategy } from './classified-strategy.js';
+import { type ConsentStrategy } from '../../with-audit/consent/strategy.js';
+import { type CrdtStrategy } from '../../with-commit/crdt/strategy.js';
+import { type CustodyStrategy } from '../../with-party/custody/strategy.js';
+import { type ForgetStrategy } from '../../with-audit/forget/strategy.js';
+import { type HistoryStrategy } from '../../with-commit/history/strategy.js';
+import { type I18nStrategy } from './i18n-strategy.js';
+import { type IndexStrategy } from '../../with-lookup/indexing/strategy.js';
+import { type PeriodsStrategy } from '../../with-audit/periods/strategy.js';
+import { type PortabilityStrategy } from '../../with-audit/portability/strategy.js';
+import { type SealedRecordStrategy } from '../../with-audit/sealed-record/strategy.js';
+import { type SearchStrategy } from '../../with-lookup/search/strategy.js';
+import { type SequenceStrategy } from '../../with-commit/sequence/strategy.js';
+import { type SessionStrategy } from '../../with-party/session/strategy.js';
+import { type ShadowStrategy } from '../../with-fork/shadow/strategy.js';
+import { type SnapshotStrategy } from '../../with-fork/snapshots/strategy.js';
+import { type SyncStrategy } from '../../with-party/team/sync-strategy.js';
+import { type TeamStrategy } from './team-strategy.js';
+import { type TiersStrategy } from '../../with-audit/tiers/strategy.js';
+import { type TxStrategy } from '../../with-commit/tx/strategy.js';
+import { type LazyStrategy } from './lazy-strategy.js';
+import type { ArchiveStrategy } from '../../with-fork/archive/index.js';
+/**
+ * Every opt-in service, resolved. One field per service, never `undefined`.
+ *
+ * Keys drop the `Strategy` suffix the `createNoydb` option carries, so
+ * `searchStrategy: withSearch()` reads back as `strategies.search`. The
+ * completeness assertion below pins that correspondence.
+ */
+export interface StrategyBag {
+    readonly aggregate: AggregateStrategy;
+    readonly archive: ArchiveStrategy;
+    readonly attestation: AttestationStrategy;
+    readonly blob: BlobStrategy;
+    readonly broker: BrokerStrategy;
+    readonly cargo: CargoStrategy;
+    readonly classified: ClassifiedStrategy;
+    readonly consent: ConsentStrategy;
+    readonly crdt: CrdtStrategy;
+    readonly custody: CustodyStrategy;
+    readonly forget: ForgetStrategy;
+    readonly history: HistoryStrategy;
+    readonly i18n: I18nStrategy;
+    readonly index: IndexStrategy;
+    readonly lazy: LazyStrategy;
+    readonly periods: PeriodsStrategy;
+    readonly portability: PortabilityStrategy;
+    readonly sealedRecord: SealedRecordStrategy;
+    readonly search: SearchStrategy;
+    readonly sequence: SequenceStrategy;
+    readonly session: SessionStrategy;
+    readonly shadow: ShadowStrategy;
+    readonly snapshot: SnapshotStrategy;
+    readonly sync: SyncStrategy;
+    readonly team: TeamStrategy;
+    readonly tiers: TiersStrategy;
+    readonly tx: TxStrategy;
+}
+/** The name of every service in the bag. */
+export type StrategyKey = keyof StrategyBag;
+/**
+ * The un-opted-in floor: what each service resolves to when the caller passed
+ * no `with*()` factory. Annotating this `StrategyBag` is what makes a missing
+ * row a compile error.
+ */
+export declare const STRATEGY_DEFAULTS: StrategyBag;
+/**
+ * Build the bag from user options. Called ONCE, in `createNoydb` — every
+ * layer below shares the resulting reference.
+ *
+ * The two casts are the price of mapping `blob` ↔ `blobStrategy` in a loop
+ * instead of writing 27 hand-copied lines; the correspondence they assume is
+ * proven at compile time by the assertion below, so a typo cannot survive a
+ * build.
+ */
+export declare function resolveStrategies(options: NoydbOptions): StrategyBag;

package/dist/query/index.js

@@ -4,7 +4,7 @@ import {
   ScanBuilder,
   buildLiveQuery,
   executePlan
-} from "../chunk-OTU5ZI3U.js";
+} from "../chunk-4X6DJZHY.js";
 import {
   DEFAULT_JOIN_MAX_ROWS,
   applyJoins,
@@ -33,7 +33,7 @@ import {
   reducerBuilder,
   resetGroupByWarnings,
   sum
-} from "../chunk-RI3OKC3Y.js";
+} from "../chunk-JIMEB4C6.js";
 import {
   evaluateClause,
   evaluateFieldClause,

package/dist/{seed-6GTDHL4E.js → seed-EKF4DIBB.js}

@@ -1,7 +1,7 @@
 import {
   BROKER_COLLECTION,
   ensureCollectionDEK
-} from "./chunk-HVZT5T22.js";
+} from "./chunk-WJDYZP3U.js";
 import "./chunk-7B4GPCX7.js";
 import {
   computeBrokerProof,
@@ -228,4 +228,4 @@ export {
   mintStoreCredentials,
   rotateSeed
 };
-//# sourceMappingURL=seed-6GTDHL4E.js.map
+//# sourceMappingURL=seed-EKF4DIBB.js.map

package/dist/{stale-NB5BGRVU.js → stale-4UNPHWOU.js}

@@ -6,7 +6,7 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-OGY4ELVE.js";
+} from "./chunk-3XVOLB75.js";
 import "./chunk-PEY6ZTCF.js";
 import "./chunk-QXPOEAKR.js";
 import "./chunk-LLVW4V7R.js";
@@ -26,4 +26,4 @@ export {
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-NB5BGRVU.js.map
+//# sourceMappingURL=stale-4UNPHWOU.js.map

package/dist/team/index.js

@@ -5,7 +5,7 @@ import {
   listCredentials,
   putCredential,
   withTeam
-} from "../chunk-Y5E6CH6S.js";
+} from "../chunk-EW4HFWGJ.js";
 import {
   NO_TEAM,
   deriveMagicLinkContentKey,
@@ -23,7 +23,7 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-4JYYIFHW.js";
+} from "../chunk-QUIG6BZT.js";
 import {
   SYNC_CREDENTIALS_COLLECTION,
   buildRecipientKeyringFile,
@@ -41,7 +41,7 @@ import {
   persistKeyring,
   revoke,
   updateKeyringIdentity
-} from "../chunk-HVZT5T22.js";
+} from "../chunk-WJDYZP3U.js";
 import "../chunk-7B4GPCX7.js";
 import {
   burnPaperRecoveryEntry,

package/dist/tiers/index.js

@@ -11,7 +11,7 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-IU22SQGU.js";
+} from "../chunk-5KI3REO3.js";
 import "../chunk-MSO2C3KG.js";
 import "../chunk-PEY6ZTCF.js";
 import "../chunk-QXPOEAKR.js";

package/dist/via/blob/active.d.ts

@@ -54,7 +54,8 @@ export interface BlobsService extends BlobStrategy {
  * })
  *
  * // Now live — delegates to BlobSet.
- * await db.vault('acme').collection('invoices').blob('inv-1').put('receipt.pdf', bytes)
+ * const vault = await db.openVault('acme')
+ * await vault.collection('invoices').blob('inv-1').put('receipt.pdf', bytes)
  * ```
  */
 export declare function withBlobs(options?: WithBlobsOptions): BlobsService;

package/dist/with/index.js

@@ -6,8 +6,8 @@ import {
   assertCanImport,
   canExport,
   canImport
-} from "../chunk-RGL53NXZ.js";
-import "../chunk-HVZT5T22.js";
+} from "../chunk-WEC3JGBA.js";
+import "../chunk-WJDYZP3U.js";
 import "../chunk-7B4GPCX7.js";
 import "../chunk-PEY6ZTCF.js";
 import "../chunk-QXPOEAKR.js";

package/dist/with-audit/forget/index.d.ts

@@ -11,7 +11,8 @@
  *   historyStrategy: withHistory(),               // ledger for the erasure proof
  *   forgetStrategy: withForgetCascade({ subjects: { invoices: 'buyerId' } }),
  * })
- * const result = await db.vault('main').forget('buyer-123')
+ * const vault = await db.openVault('main')
+ * const result = await vault.forget('buyer-123')
  * ```
  *
  * The erasure flow (`vault.forget`), the subject-index maintenance hooks, and

package/dist/with-audit/tiers/index.d.ts

@@ -392,3 +392,4 @@ export declare function demote<T>(ctx: TiersContext<T>, id: string, toTier: numb
 export declare function classifySealedShred<T>(ctx: TiersContext<T>, live: EncryptedEnvelope): Promise<{
     readonly slots: readonly SealedShredSlot[];
 }>;
+export type { SealedShredSlot } from '../../kernel/enclave/index.js';

package/dist/with-cargo/index.d.ts

@@ -42,3 +42,5 @@ export type { WriteQueue } from '../kernel/write-queue.js';
 export type { WriteConflict } from '../kernel/types.js';
 export type { AccessibleVault } from '../kernel/types.js';
 export type { Unsubscribe } from '../kernel/types.js';
+export type { ExtractPartitionOptions } from './extract-partition.js';
+export type { TransferSealPayload } from '../with-pod/bundle.js';

package/dist/with-formula/derivations/index.d.ts

@@ -4,3 +4,5 @@ export { DerivationRegistry } from './registry.js';
 export { DerivationExecutor } from './executor.js';
 export type { DerivationStrategy, DerivationStrategyHandle, DerivedFromMeta, OutputSpec, RecordOutputSpec, ArrayOutputSpec, } from './types.js';
 export { DerivationCycleError, DerivationDepthError, DerivationOutputUnknownError, DerivationOutputShapeError, DerivationCapExceededError, } from '../../kernel/errors.js';
+export type { DerivationContext } from './types.js';
+export type { RunResult } from './executor.js';

package/dist/with-formula/materialized-views/index.d.ts

@@ -9,3 +9,4 @@ export type { MaterializedViewStrategy, MaterializedViewStrategyHandle, Material
 export type { RegisteredMV } from './registry.js';
 export type { MVExecutorAccessor, RefreshResult } from './executor.js';
 export { MaterializedViewCycleError, MaterializedViewConfigError, MaterializedViewSourceUnknownError, MaterializedViewTooLargeError, } from '../../kernel/errors.js';
+export type { PutDerivedOutputCtx } from '../../kernel/via/dispatch.js';