@atscript/vue-table 0.1.140 → 0.1.141

package/dist/{use-table-state-BzjbnpBA.mjs → use-table-state-BgLIOO31.mjs}

@@ -1,7 +1,7 @@
 import { t as getCellValue } from "./get-cell-value-Cb3X8nUn.mjs";
 import { navigateHrefFor } from "@atscript/ui";
 import { computed, inject, nextTick, onBeforeUnmount, onScopeDispose, provide, ref, shallowRef, toValue, watch } from "vue";
-import { DEV, STANDARD_PRESET_ID, arraysEqual, blockStartFor, buildTableQuery, cellAsString, debounce, derivePresetAspects, filterExprFields, filterExprKey, fromWireSnapshot, gateOwns, isDirtyAgainst, isFilled, isSystemPresetId, mergeDisplayColumns, mergeSorters, normalizeResidualFilters, pageAlignedBlocksFor, planFetch, reconcileColumnWidthDefaults, residualGateOwns, resolveAspectGate, resolveSystemPresets, rowsToPks, sameColumnSet, sortRowsLocally, sortersEqual, stateToUrlQueryString, togglePk, urlQueryStringToState, walkBackwardAbsorb, walkForwardAbsorb } from "@atscript/ui-table";
+import { DEV, STANDARD_PRESET_ID, arraysEqual, blockStartFor, buildTableQuery, cellAsString, debounce, derivePresetAspects, filterExprFields, filterExprKey, fromWireSnapshot, gateOwns, isDirtyAgainst, isFilled, isSystemPresetId, mergeDisplayColumns, mergeSorters, normalizeResidualFilters, pageAlignedBlocksFor, planFetch, prunePresetSnapshot, pruneResidualFilters, reconcileColumnWidthDefaults, residualGateOwns, resolveAspectGate, resolveSystemPresets, restoreDroppedEntries, rowsToPks, sameColumnSet, sortRowsLocally, sortersEqual, stateToUrlQueryString, togglePk, urlQueryStringToState, walkBackwardAbsorb, walkForwardAbsorb } from "@atscript/ui-table";
 import { formatIdentifier } from "@atscript/db-client";
 //#region src/types.ts
 /** UI-side sentinel for the synthesised row-delete processor. */
@@ -1101,8 +1101,25 @@ function createPresetState(opts) {
 			nextActiveId: id
 		};
 	}
+	/**
+	* The one write-side prune: drop what names a field this table cannot use,
+	* and report it. A no-op before the table definition loads — bootstrap
+	* waits for it, and the query gate covers any other early writer.
+	*/
+	function pruneForApply(snapshot, presetId) {
+		const known = opts.knownFields?.value;
+		if (!known) return snapshot;
+		const { snapshot: pruned, dropped } = prunePresetSnapshot(snapshot, known);
+		if (dropped) opts.onFieldsDropped?.({
+			...dropped,
+			source: "preset",
+			presetId: presetId ?? void 0
+		});
+		return pruned;
+	}
 	function apply(idOrSnapshot) {
-		const { snapshot, nextActiveId } = resolveSnapshot(idOrSnapshot);
+		const { snapshot: resolved, nextActiveId } = resolveSnapshot(idOrSnapshot);
+		const snapshot = pruneForApply(resolved, nextActiveId);
 		const isSystem = typeof idOrSnapshot === "string" && nextActiveId !== null && isSystemPresetId(nextActiveId);
 		for (const aspect of ownedAspects(nextActiveId)) {
 			const value = snapshot[aspect];
@@ -1143,7 +1160,8 @@ function createPresetState(opts) {
 		}
 		return out;
 	}
-	const activeSnapshot = computed(() => {
+	/** The active preset's snapshot as stored — the base `saveActive` merges back into. */
+	const storedActiveSnapshot = computed(() => {
 		const id = activeId.value;
 		if (!id) return {};
 		if (isSystemPresetId(id)) return expandSystemSnapshot(systemPresetsById.value.get(id)?.content ?? {}, id);
@@ -1152,6 +1170,24 @@ function createPresetState(opts) {
 		const wire = row.data?.content;
 		return wire ? fromWireSnapshot(wire) : {};
 	});
+	const prunedActive = computed(() => {
+		const known = opts.knownFields?.value;
+		const stored = storedActiveSnapshot.value;
+		return known ? prunePresetSnapshot(stored, known) : {
+			snapshot: stored,
+			dropped: null
+		};
+	});
+	const activeSnapshot = computed(() => prunedActive.value.snapshot);
+	const droppedFields = computed(() => {
+		const dropped = prunedActive.value.dropped;
+		const presetId = activeId.value;
+		return dropped && presetId ? {
+			...dropped,
+			source: "preset",
+			presetId
+		} : null;
+	});
 	const isDirty = computed(() => isDirtyAgainst(activeSnapshot.value, captureSnapshot()) || activeSnapshot.value.filterOps !== void 0 && !!opts.residualFilters?.value.length);
 	function requirePresets() {
 		if (!opts.presetsHandle) throw new Error("[vue-table] presets feature not configured (preset.url missing)");
@@ -1163,10 +1199,12 @@ function createPresetState(opts) {
 			const id = activeId.value;
 			if (!id) throw new Error("[vue-table] saveActive: no active preset");
 			if (isSystemPresetId(id)) throw new Error("[vue-table] saveActive: system presets cannot be overwritten");
-			const existing = activeSnapshot.value;
+			const existing = storedActiveSnapshot.value;
 			const mask = {};
 			for (const aspect of availableAspects) if (existing[aspect] !== void 0) mask[aspect] = true;
-			await handle.savePreset(captureSnapshot(mask));
+			const captured = captureSnapshot(mask);
+			const dropped = prunedActive.value.dropped;
+			await handle.savePreset(dropped ? restoreDroppedEntries(captured, dropped) : captured);
 			clearLocalDraft();
 		});
 	}
@@ -1225,20 +1263,25 @@ function createPresetState(opts) {
 	function bootstrap() {
 		if (!opts.presetsHandle) return;
 		const handle = opts.presetsHandle;
-		const stop = watch(() => handle.loading.value, (loading) => {
-			if (loading) return;
-			stop();
+		const knownReady = () => !opts.knownFields || opts.knownFields.value !== null;
+		let done = false;
+		let stop;
+		stop = watch(() => !handle.loading.value && knownReady(), (ready) => {
+			if (!ready || done) return;
+			done = true;
+			stop?.();
 			const id = resolveDefaultId();
 			const { snapshot, nextActiveId } = resolveSnapshot(id);
 			const base = isSystemPresetId(id) ? expandSystemSnapshot(snapshot, id) : snapshot;
 			const draftEnabled = !!(opts.draftHandle && opts.persistDrafts);
-			apply(draftEnabled ? opts.draftHandle.hydrate(base) : base);
+			apply(pruneForApply(draftEnabled ? opts.draftHandle.hydrate(base) : base, nextActiveId));
 			activeId.value = nextActiveId;
 			if (draftEnabled) opts.draftHandle.watchAndPersist(() => captureSnapshot(), () => activeSnapshot.value);
 			nextTick(() => {
 				gate.value = true;
 			});
 		}, { immediate: true });
+		if (done) stop();
 	}
 	return {
 		slice: {
@@ -1254,6 +1297,7 @@ function createPresetState(opts) {
 			available,
 			activeId,
 			activeSnapshot,
+			droppedFields,
 			isDirty,
 			canSaveActive,
 			currentUser,
@@ -1607,6 +1651,15 @@ function warnUnsupportedFilter(issue) {
 	if (!DEV) return;
 	console.warn(`[vue-table] URL filter left out (${issue.reason}): ${JSON.stringify(issue.expr)}. Field filters cannot express it, so the table shows more rows than the URL described.`);
 }
+/**
+* The report for fields the table left out when nobody handles it
+* (`onFieldsDropped` / `@fields-dropped`): a dev-mode warning.
+*/
+function warnFieldsDropped(report) {
+	if (!DEV) return;
+	const from = report.presetId ? `${report.source} "${report.presetId}"` : report.source;
+	console.warn(`[vue-table] Left out fields this table cannot use (${from}): ${report.fields.join(", ")}.`);
+}
 function createTableState(opts) {
 	const client = opts.client;
 	const modelOpts = opts.model;
@@ -1681,6 +1734,28 @@ function createTableState(opts) {
 	const configDialogOpen = ref(false);
 	const configTab = ref("columns");
 	const filterDialogColumn = ref(null);
+	/**
+	* The paths the table can use, from its column list: every column, and the
+	* server-backed ones. `null` until the table definition loads. Presets,
+	* drafts, URLs and the query itself are all pruned against it.
+	*/
+	const knownFields = computed(() => {
+		const all = allColumns.value;
+		if (all.length === 0) return null;
+		const columns = /* @__PURE__ */ new Set();
+		const server = /* @__PURE__ */ new Set();
+		for (const c of all) {
+			columns.add(c.path);
+			if (!c.local) server.add(c.path);
+		}
+		return {
+			columns,
+			server
+		};
+	});
+	function reportFieldsDropped(report) {
+		(queryOpts?.onFieldsDropped ?? warnFieldsDropped)(report);
+	}
 	const { slice: presetSlice, internals: presetInternals } = createPresetState({
 		columnNames,
 		columnWidths,
@@ -1695,7 +1770,9 @@ function createTableState(opts) {
 		availableAspects: opts.preset?.availableAspects,
 		systemAspects: opts.preset?.systemAspects,
 		persistDrafts: opts.preset?.persistDrafts,
-		fallbackSystemPresets: opts.preset?.fallbackSystemPresets
+		fallbackSystemPresets: opts.preset?.fallbackSystemPresets,
+		knownFields,
+		onFieldsDropped: reportFieldsDropped
 	});
 	presetInternals.bootstrap();
 	const promptSlot = createRequestSlot(false);
@@ -1737,7 +1814,10 @@ function createTableState(opts) {
 	*/
 	const localColumnPaths = computed(() => {
 		const out = /* @__PURE__ */ new Set();
-		for (const c of allColumns.value) if (c.local) out.add(c.path);
+		const known = knownFields.value;
+		if (known) {
+			for (const p of known.columns) if (!known.server.has(p)) out.add(p);
+		}
 		return out;
 	});
 	/**
@@ -1770,22 +1850,67 @@ function createTableState(opts) {
 		if (splitSorters.value.local.length === 0 || sortersIgnored()) return rows;
 		return sortRowsLocally(rows, queryOpts?.forceSorters?.length ? mergeSorters(queryOpts.forceSorters, sorters.value) : sorters.value, sortValueOf);
 	}
+	/**
+	* The query's view of the model, gated to the fields this caller can use.
+	* This is the guarantee that no table state sends a field the server does
+	* not expose: presets and URLs are pruned on apply, but `setFieldFilter`,
+	* `addFilterField`, `v-model` writes, `setResidualFilters` and the like
+	* write straight to the model. `$select` is gated by the column list
+	* (`knownFields.columns`, then client-owned columns are stripped); filters
+	* and residual conditions by the server-backed columns. `forceFilters` /
+	* `forceSorters` are app-authored and never gated. Memoized: pages,
+	* window blocks and exports reuse it.
+	*/
+	const queryModel = computed(() => {
+		const model = {
+			columnNames: columnNames.value,
+			filters: filters.value,
+			sorters: splitSorters.value.server,
+			residual: residualFilters.value,
+			stripped: []
+		};
+		const known = knownFields.value;
+		if (!known) return model;
+		const { snapshot, dropped } = prunePresetSnapshot({
+			columns: { columnNames: model.columnNames },
+			filterOps: model.filters,
+			sorters: model.sorters
+		}, known);
+		const residual = pruneResidualFilters(model.residual, known.server);
+		return {
+			columnNames: model.columnNames,
+			filters: snapshot.filterOps,
+			sorters: snapshot.sorters,
+			residual: residual.kept,
+			stripped: [...new Set([...dropped?.fields ?? [], ...residual.dropped?.fields ?? []])]
+		};
+	});
+	/** Stripped path sets already warned about — one dev warning per set. */
+	const warnedStripped = /* @__PURE__ */ new Set();
 	function buildCurrentQuery(buildOpts) {
-		const available = tableDef.value?.fetchableFields ?? new Set(allColumns.value.map((c) => c.path));
+		const available = tableDef.value?.fetchableFields ?? knownFields.value?.columns ?? /* @__PURE__ */ new Set();
 		const extra = /* @__PURE__ */ new Set();
 		for (const c of columns.value) for (const p of c.selectWith ?? []) if (available.has(p)) extra.add(p);
 		if (queryOpts?.alwaysSelected) {
 			for (const p of queryOpts.alwaysSelected) if (available.has(p)) extra.add(p);
 		}
+		const model = queryModel.value;
+		if (DEV && model.stripped.length > 0) {
+			const key = model.stripped.join(",");
+			if (!warnedStripped.has(key)) {
+				warnedStripped.add(key);
+				console.warn(`[vue-table] Query leaves out fields this table cannot use: ${model.stripped.join(", ")}.`);
+			}
+		}
+		const known = knownFields.value;
 		const localPaths = localColumnPaths.value;
-		const requested = buildOpts?.columnPaths ?? columnNames.value;
 		return buildTableQuery({
-			visibleColumnPaths: localPaths.size ? requested.filter((p) => !localPaths.has(p)) : requested,
+			visibleColumnPaths: (buildOpts?.columnPaths ?? model.columnNames).filter((p) => !localPaths.has(p) && (!known || known.columns.has(p))),
 			extraSelect: extra.size ? [...extra] : void 0,
-			sorters: splitSorters.value.server,
+			sorters: model.sorters,
 			forceSorters: queryOpts?.forceSorters,
-			filters: filters.value,
-			residualFilters: residualFilters.value,
+			filters: model.filters,
+			residualFilters: model.residual,
 			forceFilters: queryOpts?.forceFilters,
 			search: searchTerm.value || void 0,
 			ignoreSorters: sortersIgnored(),
@@ -2179,12 +2304,28 @@ function createTableState(opts) {
 	function applyUrlQuery(urlString, opts) {
 		captureUrlBaseline();
 		if (urlsEquivalent(urlString, lastEmittedUrl)) return;
-		const cols = allColumns.value;
+		const known = knownFields.value;
 		const parsed = urlQueryStringToState(urlString, {
-			knownFields: cols.length > 0 ? cols.filter((c) => !c.local).map((c) => c.path) : void 0,
+			knownFields: known?.server,
+			localFields: known ? localColumnPaths.value : void 0,
 			sync: urlQuerySync
 		});
 		for (const issue of parsed.unsupported ?? []) (queryOpts?.onUnsupportedFilter ?? warnUnsupportedFilter)(issue);
+		if (parsed.unknown || parsed.unknownSorters) {
+			const residual = parsed.unknown?.map((u) => u.expr) ?? [];
+			const sorters = parsed.unknownSorters ?? [];
+			const fields = new Set(parsed.unknown?.flatMap((u) => u.fields));
+			for (const s of sorters) fields.add(s.field);
+			reportFieldsDropped({
+				source: "url",
+				fields: [...fields],
+				columns: [],
+				filterFields: [],
+				filters: {},
+				residual,
+				sorters
+			});
+		}
 		const urlResidual = parsed.residual ?? [];
 		const residualPaths = new Set(urlResidual.flatMap((expr) => filterExprFields(expr)));
 		const base = (opts?.mode ? opts.mode === "replace" : parsed.snapshot === true) ? null : urlBaseline;
@@ -2493,4 +2634,4 @@ function useRegisterMainActionListener(state, listener, enabled) {
 	});
 }
 //#endregion
-export { intentToScope as C, ROW_ACTIONS_PATH as D, triggerAction as E, ROW_ACTIONS_TYPE as O, intentClass as S, isPlainLeftClick as T, applyRowsGate as _, useTableContext as a, createNavigateGestures as b, DEFAULT_AVAILABLE_ASPECTS as c, ownerNameOf as d, readPresetLabel as f, applyRowGate as g, rowActionHref as h, useRegisterMainActionListener as i, ASPECT_ICONS as l, onSelectControlKeydown as m, createTableState as n, useTableContextOptional as o, INTERACTIVE_SELECTOR as p, provideTableContext as r, warnUnsupportedFilter as s, createStaticTableState as t, ASPECT_LABELS as u, ariaLabelFor as v, isModClick as w, extractIdentifier as x, collectIdentifiers as y };
+export { intentClass as C, triggerAction as D, isPlainLeftClick as E, ROW_ACTIONS_PATH as O, extractIdentifier as S, isModClick as T, applyRowGate as _, useTableContext as a, collectIdentifiers as b, warnUnsupportedFilter as c, ASPECT_LABELS as d, ownerNameOf as f, rowActionHref as g, onSelectControlKeydown as h, useRegisterMainActionListener as i, ROW_ACTIONS_TYPE as k, DEFAULT_AVAILABLE_ASPECTS as l, INTERACTIVE_SELECTOR as m, createTableState as n, useTableContextOptional as o, readPresetLabel as p, provideTableContext as r, warnFieldsDropped as s, createStaticTableState as t, ASPECT_ICONS as u, applyRowsGate as v, intentToScope as w, createNavigateGestures as x, ariaLabelFor as y };

package/dist/{use-table-state-pF_9gnTG.cjs → use-table-state-CgXY-ruN.cjs}

@@ -1101,8 +1101,25 @@ function createPresetState(opts) {
 			nextActiveId: id
 		};
 	}
+	/**
+	* The one write-side prune: drop what names a field this table cannot use,
+	* and report it. A no-op before the table definition loads — bootstrap
+	* waits for it, and the query gate covers any other early writer.
+	*/
+	function pruneForApply(snapshot, presetId) {
+		const known = opts.knownFields?.value;
+		if (!known) return snapshot;
+		const { snapshot: pruned, dropped } = (0, _atscript_ui_table.prunePresetSnapshot)(snapshot, known);
+		if (dropped) opts.onFieldsDropped?.({
+			...dropped,
+			source: "preset",
+			presetId: presetId ?? void 0
+		});
+		return pruned;
+	}
 	function apply(idOrSnapshot) {
-		const { snapshot, nextActiveId } = resolveSnapshot(idOrSnapshot);
+		const { snapshot: resolved, nextActiveId } = resolveSnapshot(idOrSnapshot);
+		const snapshot = pruneForApply(resolved, nextActiveId);
 		const isSystem = typeof idOrSnapshot === "string" && nextActiveId !== null && (0, _atscript_ui_table.isSystemPresetId)(nextActiveId);
 		for (const aspect of ownedAspects(nextActiveId)) {
 			const value = snapshot[aspect];
@@ -1143,7 +1160,8 @@ function createPresetState(opts) {
 		}
 		return out;
 	}
-	const activeSnapshot = (0, vue.computed)(() => {
+	/** The active preset's snapshot as stored — the base `saveActive` merges back into. */
+	const storedActiveSnapshot = (0, vue.computed)(() => {
 		const id = activeId.value;
 		if (!id) return {};
 		if ((0, _atscript_ui_table.isSystemPresetId)(id)) return expandSystemSnapshot(systemPresetsById.value.get(id)?.content ?? {}, id);
@@ -1152,6 +1170,24 @@ function createPresetState(opts) {
 		const wire = row.data?.content;
 		return wire ? (0, _atscript_ui_table.fromWireSnapshot)(wire) : {};
 	});
+	const prunedActive = (0, vue.computed)(() => {
+		const known = opts.knownFields?.value;
+		const stored = storedActiveSnapshot.value;
+		return known ? (0, _atscript_ui_table.prunePresetSnapshot)(stored, known) : {
+			snapshot: stored,
+			dropped: null
+		};
+	});
+	const activeSnapshot = (0, vue.computed)(() => prunedActive.value.snapshot);
+	const droppedFields = (0, vue.computed)(() => {
+		const dropped = prunedActive.value.dropped;
+		const presetId = activeId.value;
+		return dropped && presetId ? {
+			...dropped,
+			source: "preset",
+			presetId
+		} : null;
+	});
 	const isDirty = (0, vue.computed)(() => (0, _atscript_ui_table.isDirtyAgainst)(activeSnapshot.value, captureSnapshot()) || activeSnapshot.value.filterOps !== void 0 && !!opts.residualFilters?.value.length);
 	function requirePresets() {
 		if (!opts.presetsHandle) throw new Error("[vue-table] presets feature not configured (preset.url missing)");
@@ -1163,10 +1199,12 @@ function createPresetState(opts) {
 			const id = activeId.value;
 			if (!id) throw new Error("[vue-table] saveActive: no active preset");
 			if ((0, _atscript_ui_table.isSystemPresetId)(id)) throw new Error("[vue-table] saveActive: system presets cannot be overwritten");
-			const existing = activeSnapshot.value;
+			const existing = storedActiveSnapshot.value;
 			const mask = {};
 			for (const aspect of availableAspects) if (existing[aspect] !== void 0) mask[aspect] = true;
-			await handle.savePreset(captureSnapshot(mask));
+			const captured = captureSnapshot(mask);
+			const dropped = prunedActive.value.dropped;
+			await handle.savePreset(dropped ? (0, _atscript_ui_table.restoreDroppedEntries)(captured, dropped) : captured);
 			clearLocalDraft();
 		});
 	}
@@ -1225,20 +1263,25 @@ function createPresetState(opts) {
 	function bootstrap() {
 		if (!opts.presetsHandle) return;
 		const handle = opts.presetsHandle;
-		const stop = (0, vue.watch)(() => handle.loading.value, (loading) => {
-			if (loading) return;
-			stop();
+		const knownReady = () => !opts.knownFields || opts.knownFields.value !== null;
+		let done = false;
+		let stop;
+		stop = (0, vue.watch)(() => !handle.loading.value && knownReady(), (ready) => {
+			if (!ready || done) return;
+			done = true;
+			stop?.();
 			const id = resolveDefaultId();
 			const { snapshot, nextActiveId } = resolveSnapshot(id);
 			const base = (0, _atscript_ui_table.isSystemPresetId)(id) ? expandSystemSnapshot(snapshot, id) : snapshot;
 			const draftEnabled = !!(opts.draftHandle && opts.persistDrafts);
-			apply(draftEnabled ? opts.draftHandle.hydrate(base) : base);
+			apply(pruneForApply(draftEnabled ? opts.draftHandle.hydrate(base) : base, nextActiveId));
 			activeId.value = nextActiveId;
 			if (draftEnabled) opts.draftHandle.watchAndPersist(() => captureSnapshot(), () => activeSnapshot.value);
 			(0, vue.nextTick)(() => {
 				gate.value = true;
 			});
 		}, { immediate: true });
+		if (done) stop();
 	}
 	return {
 		slice: {
@@ -1254,6 +1297,7 @@ function createPresetState(opts) {
 			available,
 			activeId,
 			activeSnapshot,
+			droppedFields,
 			isDirty,
 			canSaveActive,
 			currentUser,
@@ -1607,6 +1651,15 @@ function warnUnsupportedFilter(issue) {
 	if (!_atscript_ui_table.DEV) return;
 	console.warn(`[vue-table] URL filter left out (${issue.reason}): ${JSON.stringify(issue.expr)}. Field filters cannot express it, so the table shows more rows than the URL described.`);
 }
+/**
+* The report for fields the table left out when nobody handles it
+* (`onFieldsDropped` / `@fields-dropped`): a dev-mode warning.
+*/
+function warnFieldsDropped(report) {
+	if (!_atscript_ui_table.DEV) return;
+	const from = report.presetId ? `${report.source} "${report.presetId}"` : report.source;
+	console.warn(`[vue-table] Left out fields this table cannot use (${from}): ${report.fields.join(", ")}.`);
+}
 function createTableState(opts) {
 	const client = opts.client;
 	const modelOpts = opts.model;
@@ -1681,6 +1734,28 @@ function createTableState(opts) {
 	const configDialogOpen = (0, vue.ref)(false);
 	const configTab = (0, vue.ref)("columns");
 	const filterDialogColumn = (0, vue.ref)(null);
+	/**
+	* The paths the table can use, from its column list: every column, and the
+	* server-backed ones. `null` until the table definition loads. Presets,
+	* drafts, URLs and the query itself are all pruned against it.
+	*/
+	const knownFields = (0, vue.computed)(() => {
+		const all = allColumns.value;
+		if (all.length === 0) return null;
+		const columns = /* @__PURE__ */ new Set();
+		const server = /* @__PURE__ */ new Set();
+		for (const c of all) {
+			columns.add(c.path);
+			if (!c.local) server.add(c.path);
+		}
+		return {
+			columns,
+			server
+		};
+	});
+	function reportFieldsDropped(report) {
+		(queryOpts?.onFieldsDropped ?? warnFieldsDropped)(report);
+	}
 	const { slice: presetSlice, internals: presetInternals } = createPresetState({
 		columnNames,
 		columnWidths,
@@ -1695,7 +1770,9 @@ function createTableState(opts) {
 		availableAspects: opts.preset?.availableAspects,
 		systemAspects: opts.preset?.systemAspects,
 		persistDrafts: opts.preset?.persistDrafts,
-		fallbackSystemPresets: opts.preset?.fallbackSystemPresets
+		fallbackSystemPresets: opts.preset?.fallbackSystemPresets,
+		knownFields,
+		onFieldsDropped: reportFieldsDropped
 	});
 	presetInternals.bootstrap();
 	const promptSlot = createRequestSlot(false);
@@ -1737,7 +1814,10 @@ function createTableState(opts) {
 	*/
 	const localColumnPaths = (0, vue.computed)(() => {
 		const out = /* @__PURE__ */ new Set();
-		for (const c of allColumns.value) if (c.local) out.add(c.path);
+		const known = knownFields.value;
+		if (known) {
+			for (const p of known.columns) if (!known.server.has(p)) out.add(p);
+		}
 		return out;
 	});
 	/**
@@ -1770,22 +1850,67 @@ function createTableState(opts) {
 		if (splitSorters.value.local.length === 0 || sortersIgnored()) return rows;
 		return (0, _atscript_ui_table.sortRowsLocally)(rows, queryOpts?.forceSorters?.length ? (0, _atscript_ui_table.mergeSorters)(queryOpts.forceSorters, sorters.value) : sorters.value, sortValueOf);
 	}
+	/**
+	* The query's view of the model, gated to the fields this caller can use.
+	* This is the guarantee that no table state sends a field the server does
+	* not expose: presets and URLs are pruned on apply, but `setFieldFilter`,
+	* `addFilterField`, `v-model` writes, `setResidualFilters` and the like
+	* write straight to the model. `$select` is gated by the column list
+	* (`knownFields.columns`, then client-owned columns are stripped); filters
+	* and residual conditions by the server-backed columns. `forceFilters` /
+	* `forceSorters` are app-authored and never gated. Memoized: pages,
+	* window blocks and exports reuse it.
+	*/
+	const queryModel = (0, vue.computed)(() => {
+		const model = {
+			columnNames: columnNames.value,
+			filters: filters.value,
+			sorters: splitSorters.value.server,
+			residual: residualFilters.value,
+			stripped: []
+		};
+		const known = knownFields.value;
+		if (!known) return model;
+		const { snapshot, dropped } = (0, _atscript_ui_table.prunePresetSnapshot)({
+			columns: { columnNames: model.columnNames },
+			filterOps: model.filters,
+			sorters: model.sorters
+		}, known);
+		const residual = (0, _atscript_ui_table.pruneResidualFilters)(model.residual, known.server);
+		return {
+			columnNames: model.columnNames,
+			filters: snapshot.filterOps,
+			sorters: snapshot.sorters,
+			residual: residual.kept,
+			stripped: [...new Set([...dropped?.fields ?? [], ...residual.dropped?.fields ?? []])]
+		};
+	});
+	/** Stripped path sets already warned about — one dev warning per set. */
+	const warnedStripped = /* @__PURE__ */ new Set();
 	function buildCurrentQuery(buildOpts) {
-		const available = tableDef.value?.fetchableFields ?? new Set(allColumns.value.map((c) => c.path));
+		const available = tableDef.value?.fetchableFields ?? knownFields.value?.columns ?? /* @__PURE__ */ new Set();
 		const extra = /* @__PURE__ */ new Set();
 		for (const c of columns.value) for (const p of c.selectWith ?? []) if (available.has(p)) extra.add(p);
 		if (queryOpts?.alwaysSelected) {
 			for (const p of queryOpts.alwaysSelected) if (available.has(p)) extra.add(p);
 		}
+		const model = queryModel.value;
+		if (_atscript_ui_table.DEV && model.stripped.length > 0) {
+			const key = model.stripped.join(",");
+			if (!warnedStripped.has(key)) {
+				warnedStripped.add(key);
+				console.warn(`[vue-table] Query leaves out fields this table cannot use: ${model.stripped.join(", ")}.`);
+			}
+		}
+		const known = knownFields.value;
 		const localPaths = localColumnPaths.value;
-		const requested = buildOpts?.columnPaths ?? columnNames.value;
 		return (0, _atscript_ui_table.buildTableQuery)({
-			visibleColumnPaths: localPaths.size ? requested.filter((p) => !localPaths.has(p)) : requested,
+			visibleColumnPaths: (buildOpts?.columnPaths ?? model.columnNames).filter((p) => !localPaths.has(p) && (!known || known.columns.has(p))),
 			extraSelect: extra.size ? [...extra] : void 0,
-			sorters: splitSorters.value.server,
+			sorters: model.sorters,
 			forceSorters: queryOpts?.forceSorters,
-			filters: filters.value,
-			residualFilters: residualFilters.value,
+			filters: model.filters,
+			residualFilters: model.residual,
 			forceFilters: queryOpts?.forceFilters,
 			search: searchTerm.value || void 0,
 			ignoreSorters: sortersIgnored(),
@@ -2179,12 +2304,28 @@ function createTableState(opts) {
 	function applyUrlQuery(urlString, opts) {
 		captureUrlBaseline();
 		if (urlsEquivalent(urlString, lastEmittedUrl)) return;
-		const cols = allColumns.value;
+		const known = knownFields.value;
 		const parsed = (0, _atscript_ui_table.urlQueryStringToState)(urlString, {
-			knownFields: cols.length > 0 ? cols.filter((c) => !c.local).map((c) => c.path) : void 0,
+			knownFields: known?.server,
+			localFields: known ? localColumnPaths.value : void 0,
 			sync: urlQuerySync
 		});
 		for (const issue of parsed.unsupported ?? []) (queryOpts?.onUnsupportedFilter ?? warnUnsupportedFilter)(issue);
+		if (parsed.unknown || parsed.unknownSorters) {
+			const residual = parsed.unknown?.map((u) => u.expr) ?? [];
+			const sorters = parsed.unknownSorters ?? [];
+			const fields = new Set(parsed.unknown?.flatMap((u) => u.fields));
+			for (const s of sorters) fields.add(s.field);
+			reportFieldsDropped({
+				source: "url",
+				fields: [...fields],
+				columns: [],
+				filterFields: [],
+				filters: {},
+				residual,
+				sorters
+			});
+		}
 		const urlResidual = parsed.residual ?? [];
 		const residualPaths = new Set(urlResidual.flatMap((expr) => (0, _atscript_ui_table.filterExprFields)(expr)));
 		const base = (opts?.mode ? opts.mode === "replace" : parsed.snapshot === true) ? null : urlBaseline;
@@ -2655,6 +2796,12 @@ Object.defineProperty(exports, "useTableContextOptional", {
 		return useTableContextOptional;
 	}
 });
+Object.defineProperty(exports, "warnFieldsDropped", {
+	enumerable: true,
+	get: function() {
+		return warnFieldsDropped;
+	}
+});
 Object.defineProperty(exports, "warnUnsupportedFilter", {
 	enumerable: true,
 	get: function() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atscript/vue-table",
-  "version": "0.1.140",
+  "version": "0.1.141",
   "description": "Type-driven table components for Atscript with Vue 3",
   "keywords": [
     "atscript",
@@ -167,9 +167,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@atscript/ui": "^0.1.140",
-    "@atscript/ui-table": "^0.1.140",
-    "@atscript/vue-form": "^0.1.140"
+    "@atscript/ui": "^0.1.141",
+    "@atscript/ui-table": "^0.1.141",
+    "@atscript/vue-form": "^0.1.141"
   },
   "devDependencies": {
     "@atscript/db-client": "^0.1.133",