@noy-db/hub 0.4.0-pre.5 → 0.4.0-pre.7

package/dist/indexing/index.js

@@ -2,17 +2,18 @@ import {
   COMPOSITE_DELIMITER,
   IDX_PREFIX,
   LazyQuery,
+  NO_INDEXING,
   PersistedCollectionIndex,
   compositeKey,
   decodeIdxId,
   encodeIdxId,
   isIdxId
-} from "../chunk-BY5YBSXA.js";
+} from "../chunk-L3YYLT4E.js";
 import {
   CollectionIndexes
 } from "../chunk-KPZS5QAQ.js";
 import "../chunk-IGJCYUT5.js";
-import "../chunk-6SYOHUHM.js";
+import "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-lookup/indexing/active.ts
@@ -68,6 +69,7 @@ export {
   CollectionIndexes,
   IDX_PREFIX,
   LazyQuery,
+  NO_INDEXING,
   PersistedCollectionIndex,
   compositeKey,
   decodeIdxId,

package/dist/indexing/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-lookup/indexing/active.ts"],"sourcesContent":["/**\n * Active indexing strategy factory. Calling `withIndexing()` returns\n * an `IndexStrategy` whose `createState` constructs a real\n * `CollectionIndexes` (eager) or `PersistedCollectionIndex` (lazy)\n * per Collection, depending on the collection's `prefetch` mode and\n * its declared `IndexDef[]`.\n *\n * This module is only reachable through the `@noy-db/hub/indexing`\n * subpath — a consumer that never imports the subpath ships none of\n * this (ESM tree-shaking + hub's `\"sideEffects\": false`).\n */\n\nimport { CollectionIndexes } from './eager-indexes.js'\nimport type { IndexDef } from './eager-indexes.js'\nimport { PersistedCollectionIndex } from './persisted-indexes.js'\nimport type { IndexStrategy, IndexState } from './strategy.js'\n\n/**\n * Build the default indexing strategy. Pass into\n * `createNoydb({ indexStrategy: withIndexing() })` to light up the\n * eager-mode `==/in` fast-path on `.query()` and the full lazy-mode\n * `.lazyQuery()` + rebuild / reconcile / auto-reconcile surface.\n *\n * @example\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withIndexing } from '@noy-db/hub/indexing'\n *\n * const db = await createNoydb({\n *   store, user, secret,\n *   indexStrategy: withIndexing(),\n * })\n * ```\n */\nexport function withIndexing(): IndexStrategy {\n  return {\n    createState({ defs, lazy }) {\n      if (lazy) {\n        const persisted = new PersistedCollectionIndex()\n        declareAll(persisted, defs)\n        return makeLazyState(persisted)\n      }\n      const eager = new CollectionIndexes()\n      for (const def of defs) {\n        if (typeof def === 'string') {\n          eager.declare(def)\n        } else if (Array.isArray(def)) {\n          for (const f of def as readonly string[]) eager.declare(f)\n        } else {\n          for (const f of (def as { fields: readonly string[] }).fields) eager.declare(f)\n        }\n      }\n      return makeEagerState(eager)\n    },\n  }\n}\n\nfunction declareAll(persisted: PersistedCollectionIndex, defs: readonly IndexDef[]): void {\n  for (const def of defs) {\n    if (typeof def === 'string') {\n      persisted.declare(def)\n    } else {\n      const fields = Array.isArray(def) ? (def as readonly string[]) : (def as { fields: readonly string[] }).fields\n      // #698: decompose a composite into its component single-field indexes\n      // (like the eager branch above), so a composite-only declaration still\n      // provides the single-field driver the #696 Via-covered fall-through\n      // and single-field queries need. The composite mirror is kept for the\n      // multi-field fast path.\n      for (const f of fields) persisted.declare(f)\n      persisted.declareComposite(fields)\n    }\n  }\n}\n\nfunction makeEagerState(eager: CollectionIndexes): IndexState {\n  return {\n    isEnabled: true,\n    getEagerIndexes: () => eager,\n    getPersistedIndexes: () => null,\n  }\n}\n\nfunction makeLazyState(persisted: PersistedCollectionIndex): IndexState {\n  return {\n    isEnabled: true,\n    getEagerIndexes: () => null,\n    getPersistedIndexes: () => persisted,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkCO,SAAS,eAA8B;AAC5C,SAAO;AAAA,IACL,YAAY,EAAE,MAAM,KAAK,GAAG;AAC1B,UAAI,MAAM;AACR,cAAM,YAAY,IAAI,yBAAyB;AAC/C,mBAAW,WAAW,IAAI;AAC1B,eAAO,cAAc,SAAS;AAAA,MAChC;AACA,YAAM,QAAQ,IAAI,kBAAkB;AACpC,iBAAW,OAAO,MAAM;AACtB,YAAI,OAAO,QAAQ,UAAU;AAC3B,gBAAM,QAAQ,GAAG;AAAA,QACnB,WAAW,MAAM,QAAQ,GAAG,GAAG;AAC7B,qBAAW,KAAK,IAA0B,OAAM,QAAQ,CAAC;AAAA,QAC3D,OAAO;AACL,qBAAW,KAAM,IAAsC,OAAQ,OAAM,QAAQ,CAAC;AAAA,QAChF;AAAA,MACF;AACA,aAAO,eAAe,KAAK;AAAA,IAC7B;AAAA,EACF;AACF;AAEA,SAAS,WAAW,WAAqC,MAAiC;AACxF,aAAW,OAAO,MAAM;AACtB,QAAI,OAAO,QAAQ,UAAU;AAC3B,gBAAU,QAAQ,GAAG;AAAA,IACvB,OAAO;AACL,YAAM,SAAS,MAAM,QAAQ,GAAG,IAAK,MAA6B,IAAsC;AAMxG,iBAAW,KAAK,OAAQ,WAAU,QAAQ,CAAC;AAC3C,gBAAU,iBAAiB,MAAM;AAAA,IACnC;AAAA,EACF;AACF;AAEA,SAAS,eAAe,OAAsC;AAC5D,SAAO;AAAA,IACL,WAAW;AAAA,IACX,iBAAiB,MAAM;AAAA,IACvB,qBAAqB,MAAM;AAAA,EAC7B;AACF;AAEA,SAAS,cAAc,WAAiD;AACtE,SAAO;AAAA,IACL,WAAW;AAAA,IACX,iBAAiB,MAAM;AAAA,IACvB,qBAAqB,MAAM;AAAA,EAC7B;AACF;","names":[]}
+{"version":3,"sources":["../../src/with-lookup/indexing/active.ts"],"sourcesContent":["/**\n * Active indexing strategy factory. Calling `withIndexing()` returns\n * an `IndexingStrategy` whose `createState` constructs a real\n * `CollectionIndexes` (eager) or `PersistedCollectionIndex` (lazy)\n * per Collection, depending on the collection's `prefetch` mode and\n * its declared `IndexDef[]`.\n *\n * This module is only reachable through the `@noy-db/hub/indexing`\n * subpath — a consumer that never imports the subpath ships none of\n * this (ESM tree-shaking + hub's `\"sideEffects\": false`).\n */\n\nimport { CollectionIndexes } from './eager-indexes.js'\nimport type { IndexDef } from './eager-indexes.js'\nimport { PersistedCollectionIndex } from './persisted-indexes.js'\nimport type { IndexingStrategy, IndexState } from './strategy.js'\n\n/**\n * Build the default indexing strategy. Pass into\n * `createNoydb({ indexingStrategy: withIndexing() })` to light up the\n * eager-mode `==/in` fast-path on `.query()` and the full lazy-mode\n * `.lazyQuery()` + rebuild / reconcile / auto-reconcile surface.\n *\n * @example\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withIndexing } from '@noy-db/hub/indexing'\n *\n * const db = await createNoydb({\n *   store, user, secret,\n *   indexingStrategy: withIndexing(),\n * })\n * ```\n */\nexport function withIndexing(): IndexingStrategy {\n  return {\n    createState({ defs, lazy }) {\n      if (lazy) {\n        const persisted = new PersistedCollectionIndex()\n        declareAll(persisted, defs)\n        return makeLazyState(persisted)\n      }\n      const eager = new CollectionIndexes()\n      for (const def of defs) {\n        if (typeof def === 'string') {\n          eager.declare(def)\n        } else if (Array.isArray(def)) {\n          for (const f of def as readonly string[]) eager.declare(f)\n        } else {\n          for (const f of (def as { fields: readonly string[] }).fields) eager.declare(f)\n        }\n      }\n      return makeEagerState(eager)\n    },\n  }\n}\n\nfunction declareAll(persisted: PersistedCollectionIndex, defs: readonly IndexDef[]): void {\n  for (const def of defs) {\n    if (typeof def === 'string') {\n      persisted.declare(def)\n    } else {\n      const fields = Array.isArray(def) ? (def as readonly string[]) : (def as { fields: readonly string[] }).fields\n      // #698: decompose a composite into its component single-field indexes\n      // (like the eager branch above), so a composite-only declaration still\n      // provides the single-field driver the #696 Via-covered fall-through\n      // and single-field queries need. The composite mirror is kept for the\n      // multi-field fast path.\n      for (const f of fields) persisted.declare(f)\n      persisted.declareComposite(fields)\n    }\n  }\n}\n\nfunction makeEagerState(eager: CollectionIndexes): IndexState {\n  return {\n    isEnabled: true,\n    getEagerIndexes: () => eager,\n    getPersistedIndexes: () => null,\n  }\n}\n\nfunction makeLazyState(persisted: PersistedCollectionIndex): IndexState {\n  return {\n    isEnabled: true,\n    getEagerIndexes: () => null,\n    getPersistedIndexes: () => persisted,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkCO,SAAS,eAAiC;AAC/C,SAAO;AAAA,IACL,YAAY,EAAE,MAAM,KAAK,GAAG;AAC1B,UAAI,MAAM;AACR,cAAM,YAAY,IAAI,yBAAyB;AAC/C,mBAAW,WAAW,IAAI;AAC1B,eAAO,cAAc,SAAS;AAAA,MAChC;AACA,YAAM,QAAQ,IAAI,kBAAkB;AACpC,iBAAW,OAAO,MAAM;AACtB,YAAI,OAAO,QAAQ,UAAU;AAC3B,gBAAM,QAAQ,GAAG;AAAA,QACnB,WAAW,MAAM,QAAQ,GAAG,GAAG;AAC7B,qBAAW,KAAK,IAA0B,OAAM,QAAQ,CAAC;AAAA,QAC3D,OAAO;AACL,qBAAW,KAAM,IAAsC,OAAQ,OAAM,QAAQ,CAAC;AAAA,QAChF;AAAA,MACF;AACA,aAAO,eAAe,KAAK;AAAA,IAC7B;AAAA,EACF;AACF;AAEA,SAAS,WAAW,WAAqC,MAAiC;AACxF,aAAW,OAAO,MAAM;AACtB,QAAI,OAAO,QAAQ,UAAU;AAC3B,gBAAU,QAAQ,GAAG;AAAA,IACvB,OAAO;AACL,YAAM,SAAS,MAAM,QAAQ,GAAG,IAAK,MAA6B,IAAsC;AAMxG,iBAAW,KAAK,OAAQ,WAAU,QAAQ,CAAC;AAC3C,gBAAU,iBAAiB,MAAM;AAAA,IACnC;AAAA,EACF;AACF;AAEA,SAAS,eAAe,OAAsC;AAC5D,SAAO;AAAA,IACL,WAAW;AAAA,IACX,iBAAiB,MAAM;AAAA,IACvB,qBAAqB,MAAM;AAAA,EAC7B;AACF;AAEA,SAAS,cAAc,WAAiD;AACtE,SAAO;AAAA,IACL,WAAW;AAAA,IACX,iBAAiB,MAAM;AAAA,IACvB,qBAAqB,MAAM;AAAA,EAC7B;AACF;","names":[]}

package/dist/introspection/index.js

@@ -0,0 +1,28 @@
+import {
+  dumpVaultSchema
+} from "../chunk-ZWBKDKXC.js";
+import {
+  applyListProjection
+} from "../chunk-VG2ZSFYD.js";
+import {
+  jsonSchemaToFields
+} from "../chunk-VYYM3MEN.js";
+import "../chunk-6ZNSB3H6.js";
+import "../chunk-Y2NBBT6K.js";
+import "../chunk-OBPVWOSQ.js";
+import "../chunk-RZPOZPZU.js";
+import "../chunk-VH6SOCXH.js";
+import "../chunk-35NMVJ7I.js";
+import "../chunk-NFZGZ4AK.js";
+import "../chunk-QJNCB5SK.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-AKKRXT23.js";
+import "../chunk-GZACYEOB.js";
+import "../chunk-QZWTRENR.js";
+import "../chunk-PZ5AY32C.js";
+export {
+  applyListProjection,
+  dumpVaultSchema,
+  jsonSchemaToFields
+};
+//# sourceMappingURL=index.js.map

package/dist/issue-55HJE7JF.js

@@ -0,0 +1,19 @@
+import {
+  issueAttestationCore
+} from "./chunk-DGBIHDVK.js";
+import "./chunk-DZAF24PG.js";
+import "./chunk-ZJADGNYF.js";
+import "./chunk-RZPOZPZU.js";
+import "./chunk-VH6SOCXH.js";
+import "./chunk-35NMVJ7I.js";
+import "./chunk-NFZGZ4AK.js";
+import "./chunk-QJNCB5SK.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AKKRXT23.js";
+import "./chunk-GZACYEOB.js";
+import "./chunk-QZWTRENR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  issueAttestationCore
+};
+//# sourceMappingURL=issue-55HJE7JF.js.map

package/dist/kernel/collection-config.d.ts

@@ -228,7 +228,7 @@ export interface CollectionOpts<T> {
     classifiedFields?: Record<string, ClassifiedEntry> | undefined;
     /**
      * The forget-cascade subject key for this collection (from
-     * `withForgetCascade({ subjects })`), plumbed by the Vault. Consumed by the
+     * `withForget({ subjects })`), plumbed by the Vault. Consumed by the
      * classified refusal matrix (R4: a digest-only field cannot be the subject key).
      */
     subjectKeyField?: string | undefined;

package/dist/kernel/collection.d.ts

@@ -103,7 +103,7 @@ export declare class Collection<T, S extends keyof T = never, Q extends keyof T
      * `NO_*` stub — a tiny module that throws with an actionable message —
      * so, for example, none of the BlobSet / chunk / MIME-magic machinery
      * reaches the bundle unless the consumer imports `@noy-db/hub/blobs` and
-     * passes `blobStrategy: blobs()` to `createNoydb`.
+     * passes `blobsStrategy: blobs()` to `createNoydb`.
      */
     private readonly strategies;
     private readonly objectStore;
@@ -141,7 +141,7 @@ export declare class Collection<T, S extends keyof T = never, Q extends keyof T
     private readonly lru;
     /**
      * tree-shake seam — per-Collection indexing state. Owned by the
-     * `IndexStrategy` passed through from `createNoydb({ indexStrategy })`.
+     * `IndexingStrategy` passed through from `createNoydb({ indexingStrategy })`.
      * Defaults to a disabled state (both accessors return null) so the
      * `CollectionIndexes` / `PersistedCollectionIndex` / `LazyQuery`
      * classes never reach the bundle when indexing is unused.

package/dist/kernel/errors.d.ts

@@ -62,7 +62,7 @@
  *       └─ Computed field errors
  *            └─ ComputedFieldError     — computed function threw during a write
  *       └─ Erasure errors
- *            └─ ForgetStrategyNotConfiguredError — vault.forget() with no withForgetCascade
+ *            └─ ForgetStrategyNotConfiguredError — vault.forget() with no withForget
  *       ├─ Sealed-record errors (record-scoped CEK sealing)
  *       │    ├─ SealedRecordExpiredError  — sealed CEK binding past expiresAt
  *       │    ├─ SealedRecordMismatchError — CEK sealed for record A used on record B
@@ -1718,7 +1718,7 @@ export declare class VaultTemplateNotFoundError extends NoydbError {
  * record index to know which records belong to a data subject; without
  * one there is nothing to erase and a silent no-op would be a dangerous
  * false "erased" signal. Configure with
- * `forgetStrategy: withForgetCascade({ subjects: { invoices: 'buyerId' } })`.
+ * `forgetStrategy: withForget({ subjects: { invoices: 'buyerId' } })`.
  */
 export declare class ForgetStrategyNotConfiguredError extends NoydbError {
     constructor(message?: string);

package/dist/kernel/lazy.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Memoized module loader for the S4 lazy-import seam (#846c).
+ *
+ * The spine and the services reach optional machinery through a dynamic
+ * `import()` — that is what keeps a service out of the floor bundle for
+ * consumers who never opt into it, and `check-architecture`'s `port-layering`
+ * rule requires it for any spine→service edge. The pattern stays; this only
+ * removes the ceremony that grew around it.
+ *
+ * Call sites had each re-invented the same shape: a `let mod = null` cache
+ * declared *inside* the function (so it cached for one invocation and no
+ * longer), plus in several places an `as { … }` cast, because destructuring a
+ * dynamic import inline gave up the module's type.
+ *
+ * ```ts
+ * const loadExecutor = lazy(() => import('./executor.js'))
+ * // …
+ * const { DerivationExecutor } = await loadExecutor()
+ * ```
+ *
+ * Note this is about clarity, not speed: the ES module system already caches a
+ * resolved module, so the win is one named binding per module instead of a
+ * hand-rolled cache and a cast at every call site.
+ *
+ * Concurrent first calls share a single in-flight promise rather than each
+ * starting their own `import()`.
+ *
+ * @internal
+ */
+export declare function lazy<T>(load: () => Promise<T>): () => Promise<T>;

package/dist/kernel/noydb.d.ts

@@ -1,3 +1,4 @@
+import type { RotateResult } from '../with-party/team/keyring.js';
 import type { NoydbOptions, NoydbEventMap, GrantOptions, RevokeOptions, UpdateUserOptions, UserInfo, PushResult, PullResult, PushOptions, PullOptions, SyncStatus, NoydbStore, AccessibleVault, ListAccessibleVaultsOptions, QueryAcrossOptions, QueryAcrossResult, TranslatorAuditEntry, WriteConflict, UserApiFactory, ActiveTier, FactorProofBundle, GateName, VaultPolicy } from './types.js';
 import type { SecretPolicy } from './validation.js';
 import { type CoordinationProvider } from '../port/by/default-provider.js';
@@ -264,23 +265,33 @@ export declare class Noydb {
     /**
      * Rotate the DEKs for the given collections in a vault.
      *
-     * Generates fresh DEKs, re-encrypts every record in each collection,
-     * and re-wraps the new DEKs into every remaining user's keyring. The
-     * old DEKs become unreachable — useful as a defense-in-depth measure
-     * after a suspected key leak, or as the scheduled half of a
-     * key-rotation policy.
+     * Generates fresh DEKs and re-encrypts every record in each collection.
+     * The old DEKs become unreachable — useful as a defense-in-depth measure
+     * after a suspected key leak, or as the scheduled half of a key-rotation
+     * policy.
      *
-     * Unlike `revoke({ rotateKeys: true })`, this call does NOT remove
-     * any users — every current member keeps access, but with fresh
-     * keys. This is the "just rotate" path; the "revoke and rotate"
-     * path still lives in `revoke()`.
+     * ## Other members LOSE access to the rotated collections (#854)
+     *
+     * A member's DEKs are wrapped under that member's KEK, and a KEK derives
+     * only from that member's secret. The caller cannot derive anyone else's
+     * KEK, so re-wrapping a fresh DEK for them is impossible — that is the
+     * zero-knowledge property working as designed. Rotation therefore DROPS
+     * the rotated collections from every other member's keyring.
+     *
+     * The returned {@link RotateResult.needsRegrant} names each (member,
+     * collection) pair that was dropped. Re-run `grant()` for those pairs, or
+     * they stay locked out.
+     *
+     * Unlike `revoke({ rotateKeys: true })`, this call does not REMOVE any
+     * user from the vault — they keep membership and their other collections.
+     * This is the "just rotate" path; "revoke and rotate" lives in `revoke()`.
      *
      * Exposed on Noydb (rather than only on the lower-level keyring
      * module) so CLI and admin tooling can trigger rotation without
      * reaching into internals. See `noy-db rotate` for the CLI wrapper.
      * Opt-in (#267): throws {@link TeamNotEnabledError} without `withTeam()`.
      */
-    rotate(vault: string, collections: string[]): Promise<void>;
+    rotate(vault: string, collections: string[]): Promise<RotateResult>;
     /** List all users with access to a vault. */
     listUsers(vault: string): Promise<UserInfo[]>;
     /**
@@ -757,7 +768,7 @@ export declare class Noydb {
     private _getKeyringInternal;
     /**
      * Take an on-demand checkpoint of the given vault.
-     * Requires `snapshotStrategy: withSnapshots({ store })` in `createNoydb`.
+     * Requires `snapshotsStrategy: withSnapshots({ store })` in `createNoydb`.
      * @throws ValidationError when the vault is not open
      */
     snapshot(vault: string, opts?: {

package/dist/kernel/query/builder.d.ts

@@ -9,10 +9,10 @@ import type { Clause, Operator } from './predicate.js';
 import type { CollectionIndexes } from '../../with-lookup/indexing/eager-indexes.js';
 import type { JoinContext, JoinLeg, JoinStrategy } from './join.js';
 import type { LiveQuery } from './live.js';
-import type { AggregateSpec, AggregateResult, Aggregation } from '../../with-lookup/aggregate/aggregation.js';
-import type { ReducerBuilder } from '../../with-lookup/aggregate/reducers.js';
-import type { GroupedQuery, GroupedQueryN } from '../../with-lookup/aggregate/groupby.js';
-import { type AggregateStrategy } from '../../with-lookup/aggregate/strategy.js';
+import type { ReduceSpec, ReduceResult, Reduction } from '../../with-lookup/reduce/reduction.js';
+import type { ReducerBuilder } from '../../with-lookup/reduce/reducers.js';
+import type { GroupedQuery, GroupedQueryN } from '../../with-lookup/reduce/groupby.js';
+import { type ReduceStrategy } from '../../with-lookup/reduce/strategy.js';
 import type { ViaPipeline } from '../via/pipeline.js';
 export interface OrderBy {
     readonly field: string;
@@ -114,9 +114,9 @@ export declare class Query<T, S extends keyof T = never, Q extends keyof T & str
     private readonly source;
     private readonly plan;
     private readonly joinContext;
-    private readonly aggregateStrategy;
+    private readonly reduceStrategy;
     private readonly predicates;
-    constructor(source: QuerySource<T>, plan?: QueryPlan, joinContext?: JoinContext, aggregateStrategy?: AggregateStrategy, predicates?: ReadonlyMap<string, DeclaredPredicate>);
+    constructor(source: QuerySource<T>, plan?: QueryPlan, joinContext?: JoinContext, reduceStrategy?: ReduceStrategy, predicates?: ReadonlyMap<string, DeclaredPredicate>);
     /**
      * @internal — accessor for the materialized-view dependency
      * analyzer. Not part of the public API; consumers should use the
@@ -353,9 +353,9 @@ export declare class Query<T, S extends keyof T = never, Q extends keyof T & str
      *   .run()
      * ```
      *
-     * Returns an `Aggregation<R>` wrapper with two terminals:
+     * Returns an `Reduction<R>` wrapper with two terminals:
      *   - `.run(): R` — synchronous one-shot reduction
-     *   - `.live(): LiveAggregation<R>` — reactive primitive that
+     *   - `.live(): LiveReduction<R>` — reactive primitive that
      *     re-runs the reduction whenever the source notifies of a
      *     change. Always call `live.stop()` when finished.
      *
@@ -391,8 +391,8 @@ export declare class Query<T, S extends keyof T = never, Q extends keyof T & str
      * aggregates over a collection with sensitive fields.
      *
      */
-    aggregate<Spec extends AggregateSpec>(spec: Spec): Aggregation<AggregateResult<Spec>>;
-    aggregate<Spec extends AggregateSpec>(build: (b: ReducerBuilder<T, S, M>) => Spec): Aggregation<AggregateResult<Spec>>;
+    aggregate<Spec extends ReduceSpec>(spec: Spec): Reduction<ReduceResult<Spec>>;
+    aggregate<Spec extends ReduceSpec>(build: (b: ReducerBuilder<T, S, M>) => Spec): Reduction<ReduceResult<Spec>>;
     /**
      * Partition matching records into buckets keyed by a field, then
      * terminate with `.aggregate(spec)` to compute per-bucket

package/dist/kernel/query/index.d.ts

@@ -20,12 +20,6 @@ export { applyJoins, DEFAULT_JOIN_MAX_ROWS, resetJoinWarnings } from './join.js'
 export type { JoinLeg, JoinContext, JoinableSource, JoinStrategy } from './join.js';
 export { buildLiveQuery } from './live.js';
 export type { LiveQuery, LiveUpstream } from './live.js';
-export { count, sum, avg, min, max, moneySum, moneyMin, moneyMax, reducerBuilder } from '../../with-lookup/aggregate/reducers.js';
-export type { Reducer, ReducerOptions, ReducerBuilder } from '../../with-lookup/aggregate/reducers.js';
-export { Aggregation, reduceRecords, buildLiveAggregation } from '../../with-lookup/aggregate/aggregation.js';
-export type { AggregateSpec, AggregateResult, AggregationUpstream, LiveAggregation, } from '../../with-lookup/aggregate/aggregation.js';
-export { GroupedQuery, GroupedQueryN, GroupedAggregation, groupAndReduce, resetGroupByWarnings, GROUPBY_WARN_CARDINALITY, GROUPBY_MAX_CARDINALITY, } from '../../with-lookup/aggregate/groupby.js';
-export type { GroupedRow, GroupedRowN } from '../../with-lookup/aggregate/groupby.js';
 export { ScanBuilder } from './scan-builder.js';
 export type { ScanPageProvider } from './scan-builder.js';
 export { GroupCardinalityError, IndexRequiredError, IndexWriteFailureError, JoinTooLargeError, DanglingReferenceError, CrossJoinTooLargeError, CrossJoinSourceUnknownError, FieldNotQueryableError, } from '../errors.js';

package/dist/kernel/query/scan-builder.d.ts

@@ -58,9 +58,9 @@
  *   - `scan().join(...)` — tracked under  (streaming join)
  */
 import type { QueryField } from '../types.js';
-import type { ReducerBuilder } from '../../with-lookup/aggregate/reducers.js';
+import type { ReducerBuilder } from '../../with-lookup/reduce/reducers.js';
 import type { Clause, Operator } from './predicate.js';
-import type { AggregateSpec, AggregateResult } from '../../with-lookup/aggregate/aggregation.js';
+import type { ReduceSpec, ReduceResult } from '../../with-lookup/reduce/reduction.js';
 import type { JoinContext, JoinLeg } from './join.js';
 import type { ViaPipeline } from '../via/pipeline.js';
 /**
@@ -321,8 +321,8 @@ export declare class ScanBuilder<T, S extends keyof T = never, M extends keyof T
      * method has never run and must not start running as a side effect of
      * this gate).
      */
-    aggregate<Spec extends AggregateSpec>(spec: Spec): Promise<AggregateResult<Spec>>;
-    aggregate<Spec extends AggregateSpec>(build: (b: ReducerBuilder<T, S, M>) => Spec): Promise<AggregateResult<Spec>>;
+    aggregate<Spec extends ReduceSpec>(spec: Spec): Promise<ReduceResult<Spec>>;
+    aggregate<Spec extends ReduceSpec>(build: (b: ReducerBuilder<T, S, M>) => Spec): Promise<ReduceResult<Spec>>;
     /**
      * Evaluate the clause list against a single record. Linear in
      * the clause count; short-circuits on first false. Clauses on a

package/dist/kernel/types.d.ts

@@ -25,17 +25,17 @@
 import type { StandardSchemaV1 } from './schema.js';
 import type { DeferredNumberingConfig } from '../with-commit/numbering/descriptor.js';
 import type { SyncPolicy } from './sync-policy.js';
-import type { BlobStrategy } from '../port/with/blob-strategy.js';
+import type { BlobsStrategy } from '../port/with/blob-strategy.js';
 import type { ArchiveStrategy } from '../with-fork/archive/index.js';
-import type { IndexStrategy } from '../with-lookup/indexing/strategy.js';
-import type { AggregateStrategy } from '../with-lookup/aggregate/strategy.js';
+import type { IndexingStrategy } from '../with-lookup/indexing/strategy.js';
+import type { ReduceStrategy } from '../with-lookup/reduce/strategy.js';
 import type { ConsentStrategy } from '../with-audit/consent/strategy.js';
 import type { PeriodsStrategy } from '../with-audit/periods/strategy.js';
 import type { ShadowStrategy } from '../with-fork/shadow/strategy.js';
-import type { TxStrategy } from '../with-commit/tx/strategy.js';
+import type { TransactionsStrategy } from '../with-commit/tx/strategy.js';
 import type { HistoryStrategy } from '../with-commit/history/strategy.js';
 import type { ForgetStrategy } from '../with-audit/forget/strategy.js';
-import type { SnapshotStrategy } from '../with-fork/snapshots/strategy.js';
+import type { SnapshotsStrategy } from '../with-fork/snapshots/strategy.js';
 import type { DerivationSkippedFrozen } from './via/dispatch.js';
 import type { AttestationStrategy } from '../with-audit/attestation/strategy.js';
 import type { ClassifiedStrategy } from '../port/with/classified-strategy.js';
@@ -52,13 +52,13 @@ import type { CargoStrategy } from '../with-cargo/strategy.js';
 import type { Layer, I18nStrategy } from '../port/with/i18n-strategy.js';
 import type { SessionStrategy } from '../with-party/session/strategy.js';
 import type { SyncStrategy } from '../with-party/team/sync-strategy.js';
-import type { GuardStrategyHandleAny } from '../with-audit/guards/types.js';
-import type { DerivationStrategyHandle } from '../with-formula/derivations/types.js';
+import type { GuardStrategyAny } from '../with-audit/guards/types.js';
+import type { DerivationStrategy } from '../with-formula/derivations/types.js';
 import type { UnlockedKeyring } from '../with-party/team/keyring.js';
 import type { SecretPolicy } from './validation.js';
 import type { CoverSchema } from '../with-party/directory/cover/types.js';
-import type { MaterializedViewStrategyHandle } from '../with-formula/materialized-views/types.js';
-import type { OverlayedViewStrategyHandle } from '../with-formula/overlay-views/types.js';
+import type { MaterializedViewStrategy } from '../with-formula/materialized-views/types.js';
+import type { OverlayedViewStrategy } from '../with-formula/overlay-views/types.js';
 import type { SealingKeyProvider, RecipientHint } from '../with-party/team/managed-secret.js';
 import type { ShamirRecoveryProvider } from '../with-party/team/shamir-recovery-provider.js';
 import type { ObjectProjection } from '../with-shape/blobs/object-projection.js';
@@ -2173,12 +2173,12 @@ export interface NoydbOptions {
      * from `@noy-db/hub/blobs` to enable `collection.blob(id)` storage.
      * When omitted, hub's blob machinery stays out of the bundle (ESM
      * tree-shaking) and `collection.blob(id)` throws with a pointer at
-     * the subpath. `BlobStrategy` is `@internal` — users only construct
+     * the subpath. `BlobsStrategy` is `@internal` — users only construct
      * it via the subpath factory.
      *
      * @internal
      */
-    readonly blobStrategy?: BlobStrategy;
+    readonly blobsStrategy?: BlobsStrategy;
     /**
      * Cold-storage archival target. `withArchive({ store })` designates a
      * second store that holds archived record envelopes. Enables
@@ -2192,24 +2192,24 @@ export interface NoydbOptions {
      * and auto-reconcile. When omitted, indexing code never reaches the
      * bundle; `.lazyQuery()` throws with a pointer at the subpath, and
      * eager-mode collections fall back to linear scans regardless of
-     * `indexes: [...]` declarations. `IndexStrategy` is `@internal` —
+     * `indexes: [...]` declarations. `IndexingStrategy` is `@internal` —
      * users only construct it via the subpath factory.
      *
      * @internal
      */
-    readonly indexStrategy?: IndexStrategy;
+    readonly indexingStrategy?: IndexingStrategy;
     /**
      * tree-shake seam — optional aggregate strategy. Pass
-     * `withAggregate()` from `@noy-db/hub/aggregate` to enable
+     * `withReduce()` from `@noy-db/hub/reduce` to enable
      * `.aggregate()` and `.groupBy()` on Query. When omitted, those
      * methods throw with a pointer at the subpath; the ~886 LOC of
-     * Aggregation + GroupedQuery machinery never reaches the bundle.
+     * Reduction + GroupedQuery machinery never reaches the bundle.
      * Streaming `scan().aggregate()` works independently of this
-     * strategy — it doesn't use the `Aggregation` class.
+     * strategy — it doesn't use the `Reduction` class.
      *
      * @internal
      */
-    readonly aggregateStrategy?: AggregateStrategy;
+    readonly reduceStrategy?: ReduceStrategy;
     /**
      * tree-shake seam — optional CRDT strategy. Required when
      * any collection is declared with `crdt: 'lww-map' | 'rga' | 'yjs'`;
@@ -2262,12 +2262,12 @@ export interface NoydbOptions {
     readonly shadowStrategy?: ShadowStrategy;
     /**
      * tree-shake seam — optional multi-record transactions. Pass
-     * `withTransactions()` from `@noy-db/hub/tx` to enable
+     * `withTransactions()` from `@noy-db/hub/transactions` to enable
      * `db.transaction(fn)`. Without it, calling the method throws.
      *
      * @internal
      */
-    readonly txStrategy?: TxStrategy;
+    readonly transactionsStrategy?: TransactionsStrategy;
     /**
      * tree-shake seam — optional history + ledger + time-machine.
      * Pass `withHistory()` from `@noy-db/hub/history` to enable
@@ -2282,7 +2282,7 @@ export interface NoydbOptions {
      */
     readonly historyStrategy?: HistoryStrategy;
     /**
-     * GDPR right-to-erasure. Pass `withForgetCascade({ subjects })`
+     * GDPR right-to-erasure. Pass `withForget({ subjects })`
      * from `@noy-db/hub/forget` to declare which collections carry erasable
      * subject data and the record field naming the data subject. Enables
      * `vault.forget(subjectId)` crypto-shred (rewrite-to-tombstone of the live
@@ -2337,7 +2337,7 @@ export interface NoydbOptions {
      * `db.snapshot()`, `db.listSnapshots()`, and `db.restoreSnapshot()`.
      * When omitted, all three methods throw with a pointer at the subpath.
      */
-    readonly snapshotStrategy?: SnapshotStrategy;
+    readonly snapshotsStrategy?: SnapshotsStrategy;
     /**
      * Tree-shake seam — optional attestation capability. Pass
      * `withAttestation()` from `@noy-db/hub/attestation` to enable
@@ -2449,7 +2449,7 @@ export interface NoydbOptions {
      * Multiple guards per collection are allowed; they are dispatched
      * in registration order on `collection.put()`.
      */
-    readonly guardStrategies?: ReadonlyArray<GuardStrategyHandleAny>;
+    readonly guardStrategies?: ReadonlyArray<GuardStrategyAny>;
     /**
      * Deferred-numbering series declared via `withDeferredNumbering(...)`.
      * `vault.sequence(series).next({ for })` then assigns gap-free serials at a
@@ -2463,7 +2463,7 @@ export interface NoydbOptions {
      * validates the derivation graph for cycles on `openVault`; a cyclic
      * graph throws `DerivationCycleError`.
      */
-    readonly derivationStrategies?: ReadonlyArray<DerivationStrategyHandle>;
+    readonly derivationStrategies?: ReadonlyArray<DerivationStrategy>;
     /**
      * Optional materialized-view strategies.
      * Each handle returned by `withMaterializedView()` from
@@ -2471,7 +2471,7 @@ export interface NoydbOptions {
      * detection across the MV + derivation graphs at `openVault`; a
      * cyclic graph throws `MaterializedViewCycleError`.
      */
-    readonly materializedViewStrategies?: ReadonlyArray<MaterializedViewStrategyHandle>;
+    readonly materializedViewStrategies?: ReadonlyArray<MaterializedViewStrategy>;
     /**
      * Optional overlay strategies. Each handle returned by
      * `withOverlayedView()` from `@noy-db/hub/overlay-views`. The vault
@@ -2479,7 +2479,7 @@ export interface NoydbOptions {
      * availability at `openVault`; a clash throws one of the
      * `Overlay*Error` family.
      */
-    readonly overlayedViewStrategies?: ReadonlyArray<OverlayedViewStrategyHandle>;
+    readonly overlayedViewStrategies?: ReadonlyArray<OverlayedViewStrategy>;
     /** Optional remote store(s) for sync. Accepts a single store, a SyncTarget, or an array. */
     readonly sync?: NoydbStore | SyncTarget | SyncTarget[];
     /** User identifier. */

package/dist/kernel/vault.d.ts

@@ -8,9 +8,9 @@ import type { JoinableSource } from './query/index.js';
 import type { OnDirtyCallback } from './collection.js';
 import type { UnlockedKeyring, BundleRecipient } from '../with-party/team/keyring.js';
 import type { MaterializedViewRegistry } from '../with-formula/materialized-views/registry.js';
-import type { MaterializedViewStrategyHandle } from '../with-formula/materialized-views/types.js';
+import type { MaterializedViewStrategy } from '../with-formula/materialized-views/types.js';
 import type { OverlayedViewRegistry } from '../with-formula/overlay-views/registry.js';
-import type { OverlayedViewStrategyHandle } from '../with-formula/overlay-views/types.js';
+import type { OverlayedViewStrategy } from '../with-formula/overlay-views/types.js';
 import type { Cover } from '../with-party/directory/cover/types.js';
 import type { ExportFormat, KeyringFile } from './types.js';
 import { ElevatedHandle } from '../with-commit/tx/elevated-handle.js';
@@ -35,10 +35,10 @@ import { type LinkSpec, type LinkSetHandle } from '../with-shape/links/names.js'
 import { ViaGraph } from './via/graph.js';
 import { type RollupDeleteIntent } from './via/dispatch.js';
 import type { GuardRegistry } from '../with-audit/guards/registry.js';
-import type { GuardStrategyHandleAny } from '../with-audit/guards/types.js';
+import type { GuardStrategyAny } from '../with-audit/guards/types.js';
 import type { ReadOnlyVaultFacade } from '../with-audit/guards/read-only-facade.js';
 import type { DerivationRegistry } from '../with-formula/derivations/registry.js';
-import type { DerivationStrategyHandle } from '../with-formula/derivations/types.js';
+import type { DerivationStrategy } from '../with-formula/derivations/types.js';
 import type { JoinedHandle } from '../with-shape/satellites/types.js';
 import { type PeriodRecord, type ClosePeriodOptions, type OpenPeriodOptions } from '../with-audit/periods/index.js';
 import { type EnclaveKey } from './enclave/index.js';
@@ -280,7 +280,7 @@ export declare class Vault {
          */
         strategies: StrategyBag;
         objectStore?: ObjectProjection | undefined;
-        guardStrategies?: ReadonlyArray<GuardStrategyHandleAny> | undefined;
+        guardStrategies?: ReadonlyArray<GuardStrategyAny> | undefined;
         numberingConfigs?: ReadonlyArray<DeferredNumberingConfig> | undefined;
         /** Vault-level descriptive metadata — set once at construction (first-wins). */
         meta?: VaultMeta | undefined;
@@ -838,7 +838,7 @@ export declare class Vault {
      * stay decryptable; migrate, then re-forget) and `blobResidueCollections` (blob attachments, keyed
      * off a separate `_blob` DEK, out of scope here).
      *
-     * @throws ForgetStrategyNotConfiguredError when no `withForgetCascade` was set.
+     * @throws ForgetStrategyNotConfiguredError when no `withForget` was set.
      */
     forget(subjectId: string): Promise<ForgetResult>;
     /**
@@ -918,7 +918,7 @@ export declare class Vault {
      * accessor `_getReadOnlyFacade()` (called from the tx amendment
      * runner) stays synchronous.
      */
-    _initGuards(handles: ReadonlyArray<GuardStrategyHandleAny>): Promise<void>;
+    _initGuards(handles: ReadonlyArray<GuardStrategyAny>): Promise<void>;
     /**
      * @internal — The gate handler in Noydb.#registerGuardGate calls into
      * this. Returns `null` for vaults that never registered any guard
@@ -934,7 +934,7 @@ export declare class Vault {
      * bundle for consumers that don't use derivations. Throws
      * `DerivationCycleError` if a cycle is detected after registration.
      */
-    _initDerivations(handles: ReadonlyArray<DerivationStrategyHandle>): Promise<void>;
+    _initDerivations(handles: ReadonlyArray<DerivationStrategy>): Promise<void>;
     /**
      * @internal — consumed by `Collection.put` at write-time. Returns
      * `null` for vaults that never registered any derivation strategy.
@@ -949,7 +949,7 @@ export declare class Vault {
      * the MV service out of the floor bundle (mirrors the derivation lazy-import pattern).
      * Throws `MaterializedViewCycleError` if a cycle is detected.
      */
-    _initMaterializedViews(handles: ReadonlyArray<MaterializedViewStrategyHandle>): Promise<void>;
+    _initMaterializedViews(handles: ReadonlyArray<MaterializedViewStrategy>): Promise<void>;
     /**
      * @internal — consumed by `Collection.put` at write-time. Returns
      * `null` for vaults that never registered any MV strategy.
@@ -961,7 +961,7 @@ export declare class Vault {
      * validates against the MV registry for name/base/overlay collisions.
      * Throws on validation failure.
      */
-    _initOverlayedViews(handles: ReadonlyArray<OverlayedViewStrategyHandle>): Promise<void>;
+    _initOverlayedViews(handles: ReadonlyArray<OverlayedViewStrategy>): Promise<void>;
     /**
      * @internal — consumed by `Vault.collection()`. Returns `null` for
      * vaults with no overlays registered.

package/dist/{ledger-M2BKCNVS.js → ledger-XY6NP3J2.js}

@@ -3,7 +3,7 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-5ATANZSW.js";
+} from "./chunk-Y6VZQGGH.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
@@ -15,16 +15,16 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "./chunk-RWW3I3PO.js";
-import "./chunk-GEEJPID6.js";
-import "./chunk-SC4JLMZI.js";
-import "./chunk-5WLDZZ6S.js";
-import "./chunk-5HSSTOOG.js";
-import "./chunk-G4MFQXYX.js";
+} from "./chunk-ISRKW4YN.js";
+import "./chunk-RZPOZPZU.js";
+import "./chunk-VH6SOCXH.js";
+import "./chunk-35NMVJ7I.js";
+import "./chunk-NFZGZ4AK.js";
+import "./chunk-QJNCB5SK.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-7U6AB7DZ.js";
-import "./chunk-YTW6ZIPD.js";
-import "./chunk-6SYOHUHM.js";
+import "./chunk-AKKRXT23.js";
+import "./chunk-GZACYEOB.js";
+import "./chunk-QZWTRENR.js";
 import "./chunk-PZ5AY32C.js";
 export {
   LEDGER_COLLECTION,
@@ -39,4 +39,4 @@ export {
   parseIndex,
   sha256Hex
 };
-//# sourceMappingURL=ledger-M2BKCNVS.js.map
+//# sourceMappingURL=ledger-XY6NP3J2.js.map

package/dist/liberate-LXOJ2EMB.js

@@ -0,0 +1,24 @@
+import {
+  liberateVault
+} from "./chunk-TIVK6PRK.js";
+import "./chunk-OLIWCCFM.js";
+import "./chunk-TE6LH6J2.js";
+import "./chunk-WO4T4OD5.js";
+import "./chunk-SGQ4N5FS.js";
+import "./chunk-JIDLU57U.js";
+import "./chunk-KPXM4WO6.js";
+import "./chunk-WZ3NCMK6.js";
+import "./chunk-RZPOZPZU.js";
+import "./chunk-VH6SOCXH.js";
+import "./chunk-35NMVJ7I.js";
+import "./chunk-NFZGZ4AK.js";
+import "./chunk-QJNCB5SK.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AKKRXT23.js";
+import "./chunk-GZACYEOB.js";
+import "./chunk-QZWTRENR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  liberateVault
+};
+//# sourceMappingURL=liberate-LXOJ2EMB.js.map