npm - @bsv/wallet-toolbox - Versions diffs - 2.1.24 → 3.0.0-alpha.0 - Mend

@bsv/wallet-toolbox 2.1.24 → 3.0.0-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (918) hide show

package/docs/storage.md CHANGED Viewed

@@ -22,25 +22,29 @@ Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](
 | | | |
 | --- | --- | --- |
-| [AdminStatsResult](#interface-adminstatsresult) | [ProvenTxFromTxidResult](#interface-proventxfromtxidresult) | [TableOutputBasket](#interface-tableoutputbasket) |
-| [CommitNewTxResults](#interface-commitnewtxresults) | [ProvenTxReqHistory](#interface-proventxreqhistory) | [TableOutputTag](#interface-tableoutputtag) |
-| [EntitySyncMap](#interface-entitysyncmap) | [ProvenTxReqHistorySummaryApi](#interface-proventxreqhistorysummaryapi) | [TableOutputTagMap](#interface-tableoutputtagmap) |
-| [GenerateChangeSdkChangeInput](#interface-generatechangesdkchangeinput) | [ProvenTxReqNotify](#interface-proventxreqnotify) | [TableOutputX](#interface-tableoutputx) |
-| [GenerateChangeSdkChangeOutput](#interface-generatechangesdkchangeoutput) | [StorageAdminStats](#interface-storageadminstats) | [TableProvenTx](#interface-tableproventx) |
-| [GenerateChangeSdkInput](#interface-generatechangesdkinput) | [StorageIdbOptions](#interface-storageidboptions) | [TableProvenTxReq](#interface-tableproventxreq) |
-| [GenerateChangeSdkOutput](#interface-generatechangesdkoutput) | [StorageIdbSchema](#interface-storageidbschema) | [TableProvenTxReqDynamics](#interface-tableproventxreqdynamics) |
-| [GenerateChangeSdkParams](#interface-generatechangesdkparams) | [StorageKnexOptions](#interface-storageknexoptions) | [TableSettings](#interface-tablesettings) |
-| [GenerateChangeSdkResult](#interface-generatechangesdkresult) | [StorageProviderOptions](#interface-storageprovideroptions) | [TableSyncState](#interface-tablesyncstate) |
-| [GenerateChangeSdkStorageChange](#interface-generatechangesdkstoragechange) | [StorageReaderOptions](#interface-storagereaderoptions) | [TableTransaction](#interface-tabletransaction) |
-| [GetReqsAndBeefDetail](#interface-getreqsandbeefdetail) | [StorageReaderWriterOptions](#interface-storagereaderwriteroptions) | [TableTxLabel](#interface-tabletxlabel) |
-| [GetReqsAndBeefResult](#interface-getreqsandbeefresult) | [SyncError](#interface-syncerror) | [TableTxLabelMap](#interface-tabletxlabelmap) |
-| [ListActionsSpecOp](#interface-listactionsspecop) | [SyncMap](#interface-syncmap) | [TableUser](#interface-tableuser) |
-| [ListOutputsSpecOp](#interface-listoutputsspecop) | [TableCertificate](#interface-tablecertificate) | [ValidateGenerateChangeSdkParamsResult](#interface-validategeneratechangesdkparamsresult) |
-| [MonitorAdminContext](#interface-monitoradmincontext) | [TableCertificateField](#interface-tablecertificatefield) | [VerifyAndRepairBeefResult](#interface-verifyandrepairbeefresult) |
-| [MonitorAdminContextConfig](#interface-monitoradmincontextconfig) | [TableCertificateX](#interface-tablecertificatex) | [WalletStorageServerOptions](#interface-walletstorageserveroptions) |
-| [PostBeefResultForTxidApi](#interface-postbeefresultfortxidapi) | [TableCommission](#interface-tablecommission) | [XValidCreateActionOutput](#interface-xvalidcreateactionoutput) |
-| [PostReqsToNetworkDetails](#interface-postreqstonetworkdetails) | [TableMonitorEvent](#interface-tablemonitorevent) |  |
-| [PostReqsToNetworkResult](#interface-postreqstonetworkresult) | [TableOutput](#interface-tableoutput) |  |
+| [AdminStatsResult](#interface-adminstatsresult) | [PostBeefResultForTxidApi](#interface-postbeefresultfortxidapi) | [TableMonitorLease](#interface-tablemonitorlease) |
+| [AggregatePostBeefTxResult](#interface-aggregatepostbeeftxresult) | [PostReqsToNetworkDetails](#interface-postreqstonetworkdetails) | [TableOutput](#interface-tableoutput) |
+| [AuditEvent](#interface-auditevent) | [PostReqsToNetworkResult](#interface-postreqstonetworkresult) | [TableOutputBasket](#interface-tableoutputbasket) |
+| [CommitNewTxResults](#interface-commitnewtxresults) | [ProvenTxFromTxidResult](#interface-proventxfromtxidresult) | [TableOutputTag](#interface-tableoutputtag) |
+| [EntitySyncMap](#interface-entitysyncmap) | [ProvenTxReqHistory](#interface-proventxreqhistory) | [TableOutputTagMap](#interface-tableoutputtagmap) |
+| [FsmTransitionResult](#interface-fsmtransitionresult) | [ProvenTxReqHistorySummaryApi](#interface-proventxreqhistorysummaryapi) | [TableOutputX](#interface-tableoutputx) |
+| [GenerateChangeSdkChangeInput](#interface-generatechangesdkchangeinput) | [ProvenTxReqNotify](#interface-proventxreqnotify) | [TableProvenTx](#interface-tableproventx) |
+| [GenerateChangeSdkChangeOutput](#interface-generatechangesdkchangeoutput) | [StorageAdminStats](#interface-storageadminstats) | [TableProvenTxReq](#interface-tableproventxreq) |
+| [GenerateChangeSdkInput](#interface-generatechangesdkinput) | [StorageIdbOptions](#interface-storageidboptions) | [TableProvenTxReqDynamics](#interface-tableproventxreqdynamics) |
+| [GenerateChangeSdkOutput](#interface-generatechangesdkoutput) | [StorageIdbSchema](#interface-storageidbschema) | [TableSettings](#interface-tablesettings) |
+| [GenerateChangeSdkParams](#interface-generatechangesdkparams) | [StorageKnexOptions](#interface-storageknexoptions) | [TableSyncState](#interface-tablesyncstate) |
+| [GenerateChangeSdkResult](#interface-generatechangesdkresult) | [StorageProviderOptions](#interface-storageprovideroptions) | [TableTransaction](#interface-tabletransaction) |
+| [GenerateChangeSdkStorageChange](#interface-generatechangesdkstoragechange) | [StorageReaderOptions](#interface-storagereaderoptions) | [TableTransactionNew](#interface-tabletransactionnew) |
+| [GetReqsAndBeefDetail](#interface-getreqsandbeefdetail) | [StorageReaderWriterOptions](#interface-storagereaderwriteroptions) | [TableTxAudit](#interface-tabletxaudit) |
+| [GetReqsAndBeefResult](#interface-getreqsandbeefresult) | [SyncError](#interface-syncerror) | [TableTxLabel](#interface-tabletxlabel) |
+| [ListActionsSpecOp](#interface-listactionsspecop) | [SyncMap](#interface-syncmap) | [TableTxLabelMap](#interface-tabletxlabelmap) |
+| [ListOutputsSpecOp](#interface-listoutputsspecop) | [TableAction](#interface-tableaction) | [TableUser](#interface-tableuser) |
+| [MonitorAdminContext](#interface-monitoradmincontext) | [TableCertificate](#interface-tablecertificate) | [ValidateGenerateChangeSdkParamsResult](#interface-validategeneratechangesdkparamsresult) |
+| [MonitorAdminContextConfig](#interface-monitoradmincontextconfig) | [TableCertificateField](#interface-tablecertificatefield) | [VerifyAndRepairBeefResult](#interface-verifyandrepairbeefresult) |
+| [MonitorLeaseClaim](#interface-monitorleaseclaim) | [TableCertificateX](#interface-tablecertificatex) | [WalletStorageServerOptions](#interface-walletstorageserveroptions) |
+| [MonitorLeaseRelease](#interface-monitorleaserelease) | [TableChainTip](#interface-tablechaintip) | [XValidCreateActionOutput](#interface-xvalidcreateactionoutput) |
+| [MonitorLeaseRenew](#interface-monitorleaserenew) | [TableCommission](#interface-tablecommission) |  |
+| [MonitorLeaseResult](#interface-monitorleaseresult) | [TableMonitorEvent](#interface-tablemonitorevent) |  |
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
@@ -55,7 +59,61 @@ export interface AdminStatsResult extends StorageAdminStats {
 }
 ```
-See also: [ServicesCallHistory](./client.md#type-servicescallhistory), [StorageAdminStats](./storage.md#interface-storageadminstats)
+See also: [ServicesCallHistory](./client.md#interface-servicescallhistory), [StorageAdminStats](./storage.md#interface-storageadminstats)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Interface: AggregatePostBeefTxResult
+```ts
+export interface AggregatePostBeefTxResult {
+    txid: string;
+    txidResults: sdk.PostTxResultForTxid[];
+    status: AggregateStatus;
+    vreq: PostReqsToNetworkDetails;
+    successCount: number;
+    doubleSpendCount: number;
+    statusErrorCount: number;
+    serviceErrorCount: number;
+    competingTxs: string[];
+}
+```
+See also: [PostReqsToNetworkDetails](./storage.md#interface-postreqstonetworkdetails), [PostTxResultForTxid](./client.md#interface-posttxresultfortxid)
+###### Property competingTxs
+Any competing double spend txids reported for this txid
+```ts
+competingTxs: string[]
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Interface: AuditEvent
+append-only audit log writer.
+Each call inserts one `tx_audit` row. Events should be small, stable
+identifiers (e.g. `processing.changed`, `proof.acquired`, `lease.claimed`).
+Payload is stored as a JSON-encoded string so downstream consumers may add
+shape over time without a migration.
+```ts
+export interface AuditEvent {
+    transactionId?: number;
+    actionId?: number;
+    event: string;
+    fromState?: sdk.ProcessingStatus;
+    toState?: sdk.ProcessingStatus;
+    details?: Record<string, unknown>;
+}
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
@@ -116,6 +174,18 @@ maxUpdated_at?: Date
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Interface: FsmTransitionResult
+```ts
+export interface FsmTransitionResult {
+    ok: boolean;
+    reason?: string;
+}
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Interface: GenerateChangeSdkChangeInput
@@ -321,7 +391,7 @@ export interface ListActionsSpecOp {
     name: string;
     labelsToIntercept?: string[];
     setStatusFilter?: () => TransactionStatus[];
-    postProcess?: (s: StorageProvider, auth: AuthId, vargs: Validation.ValidListActionsArgs, specOpLabels: string[], txs: Partial<TableTransaction>[]) => Promise<void>;
+    postProcess?: (s: StorageProvider, auth: AuthId, vargs: Validation.ValidListActionsArgs, specOpLabels: string[], txs: Array<Partial<TableTransaction>>) => Promise<void>;
 }
 ```
@@ -419,6 +489,72 @@ See also: [Chain](./client.md#type-chain)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Interface: MonitorLeaseClaim
+monitor lease primitive.
+A `monitor_lease` row records the owner that may currently execute a named
+task. Acquisition is opportunistic: a Monitor calls `tryClaimLease()` to
+insert or take over a stale row; if it succeeds it owns the task until
+`expiresAt`. While running it calls `renewLease()` to extend the deadline.
+On clean shutdown it calls `releaseLease()`.
+The Knex driver expresses claim + takeover as a single conditional UPDATE
+so that two contending Monitors cannot both believe they own the task — at
+most one row write will succeed per (task, expiry) pair.
+```ts
+export interface MonitorLeaseClaim {
+    taskName: string;
+    ownerId: string;
+    ttlMs: number;
+    note?: string;
+}
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Interface: MonitorLeaseRelease
+```ts
+export interface MonitorLeaseRelease {
+    taskName: string;
+    ownerId: string;
+}
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Interface: MonitorLeaseRenew
+```ts
+export interface MonitorLeaseRenew {
+    taskName: string;
+    ownerId: string;
+    ttlMs: number;
+    note?: string;
+}
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Interface: MonitorLeaseResult
+```ts
+export interface MonitorLeaseResult {
+    acquired: boolean;
+    lease?: TableMonitorLease;
+}
+```
+See also: [TableMonitorLease](./storage.md#interface-tablemonitorlease)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Interface: PostBeefResultForTxidApi
@@ -518,7 +654,7 @@ export interface ProvenTxReqHistory {
 }
 ```
-See also: [ReqHistoryNote](./client.md#type-reqhistorynote)
+See also: [ReqHistoryNote](./client.md#interface-reqhistorynote)
 ###### Property notes
@@ -528,7 +664,7 @@ Values are a description of what happened.
 ```ts
 notes?: ReqHistoryNote[]
 ```
-See also: [ReqHistoryNote](./client.md#type-reqhistorynote)
+See also: [ReqHistoryNote](./client.md#interface-reqhistorynote)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
@@ -801,10 +937,57 @@ export interface StorageIdbSchema {
             identityKey: string;
         };
     };
+    transactionsNew: {
+        key: number;
+        value: TableTransactionNew;
+        indexes: {
+            txid: HexString;
+            processing: ProcessingStatus;
+            batch: string;
+            idempotencyKey: string;
+        };
+    };
+    actions: {
+        key: number;
+        value: TableAction;
+        indexes: {
+            userId: number;
+            transactionId: number;
+            userId_transactionId: [
+                number,
+                number
+            ];
+            userId_reference: [
+                number,
+                string
+            ];
+        };
+    };
+    chainTip: {
+        key: number;
+        value: TableChainTip;
+        indexes: Record<string, never>;
+    };
+    txAudit: {
+        key: number;
+        value: TableTxAudit;
+        indexes: {
+            transactionId: number;
+            actionId: number;
+            event: string;
+        };
+    };
+    monitorLease: {
+        key: string;
+        value: TableMonitorLease;
+        indexes: {
+            expiresAt: Date;
+        };
+    };
 }
 ```
-See also: [ProvenTxReqStatus](./client.md#type-proventxreqstatus), [SyncStatus](./client.md#type-syncstatus), [TableCertificate](./storage.md#interface-tablecertificate), [TableCertificateField](./storage.md#interface-tablecertificatefield), [TableCommission](./storage.md#interface-tablecommission), [TableMonitorEvent](./storage.md#interface-tablemonitorevent), [TableOutput](./storage.md#interface-tableoutput), [TableOutputBasket](./storage.md#interface-tableoutputbasket), [TableOutputTag](./storage.md#interface-tableoutputtag), [TableOutputTagMap](./storage.md#interface-tableoutputtagmap), [TableProvenTx](./storage.md#interface-tableproventx), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TableSettings](./storage.md#interface-tablesettings), [TableSyncState](./storage.md#interface-tablesyncstate), [TableTransaction](./storage.md#interface-tabletransaction), [TableTxLabel](./storage.md#interface-tabletxlabel), [TableTxLabelMap](./storage.md#interface-tabletxlabelmap), [TableUser](./storage.md#interface-tableuser), [TransactionStatus](./client.md#type-transactionstatus)
+See also: [ProcessingStatus](./client.md#type-processingstatus), [ProvenTxReqStatus](./client.md#type-proventxreqstatus), [SyncStatus](./client.md#type-syncstatus), [TableAction](./storage.md#interface-tableaction), [TableCertificate](./storage.md#interface-tablecertificate), [TableCertificateField](./storage.md#interface-tablecertificatefield), [TableChainTip](./storage.md#interface-tablechaintip), [TableCommission](./storage.md#interface-tablecommission), [TableMonitorEvent](./storage.md#interface-tablemonitorevent), [TableMonitorLease](./storage.md#interface-tablemonitorlease), [TableOutput](./storage.md#interface-tableoutput), [TableOutputBasket](./storage.md#interface-tableoutputbasket), [TableOutputTag](./storage.md#interface-tableoutputtag), [TableOutputTagMap](./storage.md#interface-tableoutputtagmap), [TableProvenTx](./storage.md#interface-tableproventx), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TableSettings](./storage.md#interface-tablesettings), [TableSyncState](./storage.md#interface-tablesyncstate), [TableTransaction](./storage.md#interface-tabletransaction), [TableTransactionNew](./storage.md#interface-tabletransactionnew), [TableTxAudit](./storage.md#interface-tabletxaudit), [TableTxLabel](./storage.md#interface-tabletxlabel), [TableTxLabelMap](./storage.md#interface-tabletxlabelmap), [TableUser](./storage.md#interface-tableuser), [TransactionStatus](./client.md#type-transactionstatus)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
@@ -926,6 +1109,121 @@ See also: [EntitySyncMap](./storage.md#interface-entitysyncmap)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Interface: TableAction
+per-user view of a transaction.
+Migrated from the legacy `transactions` table. Holds everything that is truly
+per-user (description, labels via tx_labels_map -> actionId, soft-delete flags,
+notification subscribers). All on-chain status lives in the new `transactions`
+table addressed by `transactionId`.
+UNIQUE(userId, transactionId).
+```ts
+export interface TableAction extends sdk.EntityTimeStamp {
+    created_at: Date;
+    updated_at: Date;
+    actionId: number;
+    userId: number;
+    transactionId: number;
+    reference: string;
+    description: string;
+    isOutgoing: boolean;
+    satoshisDelta: number;
+    userNosend: boolean;
+    hidden: boolean;
+    userAborted: boolean;
+    notifyJson?: string;
+    rowVersion: number;
+}
+```
+See also: [EntityTimeStamp](./client.md#interface-entitytimestamp)
+###### Property actionId
+PK
+```ts
+actionId: number
+```
+###### Property hidden
+Soft-delete flag — hide from default queries
+```ts
+hidden: boolean
+```
+###### Property isOutgoing
+true if originated in this wallet (change returns to it)
+```ts
+isOutgoing: boolean
+```
+###### Property notifyJson
+JSON string of per-user notification subscribers (mirrors legacy notify)
+```ts
+notifyJson?: string
+```
+###### Property reference
+Application reference, hex/Base64, max 64 chars
+```ts
+reference: string
+```
+###### Property rowVersion
+Optimistic concurrency token
+```ts
+rowVersion: number
+```
+###### Property satoshisDelta
+Signed net change to this user's balance from this action
+```ts
+satoshisDelta: number
+```
+###### Property transactionId
+FK -> new transactions.transactionId (per-txid record)
+```ts
+transactionId: number
+```
+###### Property userAborted
+Per-user abort flag
+```ts
+userAborted: boolean
+```
+###### Property userNosend
+Per-user nosend override
+```ts
+userNosend: boolean
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Interface: TableCertificate
@@ -982,6 +1280,44 @@ See also: [TableCertificate](./storage.md#interface-tablecertificate), [TableCer
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Interface: TableChainTip
+singleton row tracking the most recently observed chain tip.
+Used by spendability checks and coinbase maturity calculations.
+```ts
+export interface TableChainTip extends sdk.EntityTimeStamp {
+    created_at: Date;
+    updated_at: Date;
+    id: number;
+    height: number;
+    blockHash: string;
+    merkleRoot?: string;
+    observedAt: Date;
+}
+```
+See also: [EntityTimeStamp](./client.md#interface-entitytimestamp), [blockHash](./services.md#function-blockhash)
+###### Property id
+Always 1 — singleton enforced by storage layer
+```ts
+id: number
+```
+###### Property observedAt
+Wall-clock of the observation
+```ts
+observedAt: Date
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Interface: TableCommission
@@ -1020,6 +1356,71 @@ See also: [EntityTimeStamp](./client.md#interface-entitytimestamp)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Interface: TableMonitorLease
+monitor_lease record so at most one Monitor daemon owns a given task at a time.
+The Monitor acquires a lease by upserting `(taskName, ownerId, expiresAt)`
+and renews periodically. Stale leases (`expiresAt < now`) may be claimed by
+another instance.
+```ts
+export interface TableMonitorLease extends sdk.EntityTimeStamp {
+    created_at: Date;
+    updated_at: Date;
+    taskName: string;
+    ownerId: string;
+    expiresAt: Date;
+    renewCount: number;
+    note?: string;
+}
+```
+See also: [EntityTimeStamp](./client.md#interface-entitytimestamp)
+###### Property expiresAt
+Lease expiry — claimants treat any row with expiresAt <= now() as free
+```ts
+expiresAt: Date
+```
+###### Property note
+Optional free-text description of current activity
+```ts
+note?: string
+```
+###### Property ownerId
+Stable identifier for the owning Monitor instance
+```ts
+ownerId: string
+```
+###### Property renewCount
+Monotonic counter incremented on each successful renew
+```ts
+renewCount: number
+```
+###### Property taskName
+Logical task name, e.g. 'proof-acquisition'
+```ts
+taskName: string
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Interface: TableOutput
@@ -1050,11 +1451,23 @@ export interface TableOutput extends sdk.EntityTimeStamp {
     scriptLength?: number;
     scriptOffset?: number;
     lockingScript?: number[];
+    maturesAtHeight?: number;
 }
 ```
 See also: [EntityTimeStamp](./client.md#interface-entitytimestamp), [StorageProvidedBy](./client.md#type-storageprovidedby)
+###### Property maturesAtHeight
+new-schema: minimum block height at which a coinbase output becomes spendable.
+NULL for non-coinbase outputs and for pre-new schema rows that have not yet been
+backfilled. The §4 spendability rule treats a non-coinbase output as
+mature regardless of this column.
+```ts
+maturesAtHeight?: number
+```
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
@@ -1166,6 +1579,8 @@ export interface TableProvenTxReq extends TableProvenTxReqDynamics {
     notify: string;
     rawTx: number[];
     inputBEEF?: number[];
+    wasBroadcast?: boolean;
+    rebroadcastAttempts?: number;
 }
 ```
@@ -1213,6 +1628,27 @@ Parses to `ProvenTxReqNotifyApi`.
 notify: string
 ```
+###### Property rebroadcastAttempts
+Count of how many times this req has been reset to 'unsent' for rebroadcast
+after proof check timeout. Used by the circuit-breaker (maxRebroadcastAttempts).
+Defaults to 0 (added by migration 2026-04-30-001).
+```ts
+rebroadcastAttempts?: number
+```
+###### Property wasBroadcast
+Set to true the first time this req transitions to 'unmined' or 'callback' status,
+indicating the transaction was successfully broadcast to the network.
+Used to distinguish rebroadcast candidates from transactions that were never sent.
+Defaults to false (added by migration 2026-04-30-001).
+```ts
+wasBroadcast?: boolean
+```
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
@@ -1230,6 +1666,8 @@ export interface TableProvenTxReqDynamics extends sdk.EntityTimeStamp {
     batch?: string;
     history: string;
     notify: string;
+    wasBroadcast?: boolean;
+    rebroadcastAttempts?: number;
 }
 ```
@@ -1277,9 +1715,27 @@ Parses to `ProvenTxReqNotifyApi`.
 notify: string
 ```
-Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+###### Property rebroadcastAttempts
----
+Count of rebroadcast cycles for this req. Used by the circuit-breaker.
+Defaults to 0 (added by migration 2026-04-30-001).
+```ts
+rebroadcastAttempts?: number
+```
+###### Property wasBroadcast
+Set to true the first time this req transitions to 'unmined' or 'callback' status.
+Defaults to false (added by migration 2026-04-30-001).
+```ts
+wasBroadcast?: boolean
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
 ##### Interface: TableSettings
 ```ts
@@ -1403,6 +1859,237 @@ version?: number
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Interface: TableTransactionNew
+new canonical per-txid table.
+Single source of truth for everything about a transaction on the network.
+Merges the legacy `proven_tx_reqs` (broadcast queue + processing state) and
+`proven_txs` (final Merkle proof) tables into one row per txid.
+Per-user metadata (description, labels, hidden, etc.) lives in `actions`.
+```ts
+export interface TableTransactionNew extends sdk.EntityTimeStamp {
+    created_at: Date;
+    updated_at: Date;
+    transactionId: number;
+    txid: string;
+    processing: sdk.ProcessingStatus;
+    processingChangedAt: Date;
+    nextActionAt?: Date;
+    attempts: number;
+    rebroadcastCycles: number;
+    wasBroadcast: boolean;
+    idempotencyKey?: string;
+    batch?: string;
+    rawTx?: number[];
+    inputBeef?: number[];
+    height?: number;
+    merkleIndex?: number;
+    merklePath?: number[];
+    merkleRoot?: string;
+    blockHash?: string;
+    isCoinbase: boolean;
+    lastProvider?: string;
+    lastProviderStatus?: string;
+    frozenReason?: string;
+    rowVersion: number;
+}
+```
+See also: [EntityTimeStamp](./client.md#interface-entitytimestamp), [ProcessingStatus](./client.md#type-processingstatus), [blockHash](./services.md#function-blockhash)
+###### Property attempts
+Cumulative network-service attempt count
+```ts
+attempts: number
+```
+###### Property batch
+Optional batch tag for grouped broadcast
+```ts
+batch?: string
+```
+###### Property frozenReason
+Reason a row is in `frozen` state, free text
+```ts
+frozenReason?: string
+```
+###### Property height
+Merkle proof fields — populated on transition to `proven`
+```ts
+height?: number
+```
+###### Property idempotencyKey
+Application-supplied idempotency key (unique when present)
+```ts
+idempotencyKey?: string
+```
+###### Property nextActionAt
+Wall-clock at which the next monitor pass should consider this row
+```ts
+nextActionAt?: Date
+```
+###### Property processing
+Granular FSM state (see ProcessingStatus)
+```ts
+processing: sdk.ProcessingStatus
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus)
+###### Property processingChangedAt
+Wall-clock of the most recent processing transition
+```ts
+processingChangedAt: Date
+```
+###### Property rebroadcastCycles
+Count of times this row has been reset for rebroadcast (circuit-breaker)
+```ts
+rebroadcastCycles: number
+```
+###### Property rowVersion
+Optimistic concurrency token
+```ts
+rowVersion: number
+```
+###### Property transactionId
+PK
+```ts
+transactionId: number
+```
+###### Property txid
+UNIQUE — Bitcoin txid, hex
+```ts
+txid: string
+```
+###### Property wasBroadcast
+true once the row has reached a state implying successful broadcast
+```ts
+wasBroadcast: boolean
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Interface: TableTxAudit
+per-event audit log for transactions and actions.
+Each row records a single observable event scoped to either a transaction
+(per-txid) or an action (per-user) or both. Append-only.
+```ts
+export interface TableTxAudit extends sdk.EntityTimeStamp {
+    created_at: Date;
+    updated_at: Date;
+    auditId: number;
+    transactionId?: number;
+    actionId?: number;
+    event: string;
+    fromState?: string;
+    toState?: string;
+    detailsJson?: string;
+}
+```
+See also: [EntityTimeStamp](./client.md#interface-entitytimestamp)
+###### Property actionId
+FK -> actions.actionId, optional for tx-only events
+```ts
+actionId?: number
+```
+###### Property auditId
+PK
+```ts
+auditId: number
+```
+###### Property detailsJson
+JSON-encoded event payload
+```ts
+detailsJson?: string
+```
+###### Property event
+Stable event identifier, e.g. 'processing.changed', 'proof.acquired'
+```ts
+event: string
+```
+###### Property fromState
+Optional FSM source state for transitions
+```ts
+fromState?: string
+```
+###### Property toState
+Optional FSM target state for transitions
+```ts
+toState?: string
+```
+###### Property transactionId
+FK -> transactions.transactionId, optional for action-only events
+```ts
+transactionId?: number
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Interface: TableTxLabel
@@ -1542,15 +2229,16 @@ Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](
 | | | |
 | --- | --- | --- |
-| [AdminServer](#class-adminserver) | [EntityProvenTx](#class-entityproventx) | [StorageClient](#class-storageclient) |
-| [EntityBase](#class-entitybase) | [EntityProvenTxReq](#class-entityproventxreq) | [StorageIdb](#class-storageidb) |
-| [EntityCertificate](#class-entitycertificate) | [EntitySyncState](#class-entitysyncstate) | [StorageKnex](#class-storageknex) |
-| [EntityCertificateField](#class-entitycertificatefield) | [EntityTransaction](#class-entitytransaction) | [StorageProvider](#class-storageprovider) |
-| [EntityCommission](#class-entitycommission) | [EntityTxLabel](#class-entitytxlabel) | [StorageReader](#class-storagereader) |
-| [EntityOutput](#class-entityoutput) | [EntityTxLabelMap](#class-entitytxlabelmap) | [StorageReaderWriter](#class-storagereaderwriter) |
-| [EntityOutputBasket](#class-entityoutputbasket) | [EntityUser](#class-entityuser) | [StorageServer](#class-storageserver) |
-| [EntityOutputTag](#class-entityoutputtag) | [KnexMigrations](#class-knexmigrations) | [StorageSyncReader](#class-storagesyncreader) |
-| [EntityOutputTagMap](#class-entityoutputtagmap) | [MergeEntity](#class-mergeentity) | [WalletStorageManager](#class-walletstoragemanager) |
+| [AdminServer](#class-adminserver) | [EntityProvenTxReq](#class-entityproventxreq) | [StorageIdb](#class-storageidb) |
+| [EntityBase](#class-entitybase) | [EntitySyncState](#class-entitysyncstate) | [StorageKnex](#class-storageknex) |
+| [EntityCertificate](#class-entitycertificate) | [EntityTransaction](#class-entitytransaction) | [StorageProvider](#class-storageprovider) |
+| [EntityCertificateField](#class-entitycertificatefield) | [EntityTxLabel](#class-entitytxlabel) | [StorageReader](#class-storagereader) |
+| [EntityCommission](#class-entitycommission) | [EntityTxLabelMap](#class-entitytxlabelmap) | [StorageReaderWriter](#class-storagereaderwriter) |
+| [EntityOutput](#class-entityoutput) | [EntityUser](#class-entityuser) | [StorageServer](#class-storageserver) |
+| [EntityOutputBasket](#class-entityoutputbasket) | [KnexMigrations](#class-knexmigrations) | [StorageSyncReader](#class-storagesyncreader) |
+| [EntityOutputTag](#class-entityoutputtag) | [MergeEntity](#class-mergeentity) | [TransactionService](#class-transactionservice) |
+| [EntityOutputTagMap](#class-entityoutputtagmap) | [StorageClient](#class-storageclient) | [WalletStorageManager](#class-walletstoragemanager) |
+| [EntityProvenTx](#class-entityproventx) | [StorageClientBase](#class-storageclientbase) |  |
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
@@ -2026,9 +2714,9 @@ export class EntityProvenTx extends EntityBase<TableProvenTx> {
     }>
     override async mergeNew(storage: EntityStorage, userId: number, syncMap: SyncMap, trx?: TrxToken): Promise<void>
     override async mergeExisting(storage: EntityStorage, since: Date | undefined, ei: TableProvenTx, syncMap: SyncMap, trx?: TrxToken): Promise<boolean>
-    static getProofAttemptsLimit = 8;
-    static getProofMinutes = 60;
-    static async fromReq(req: EntityProvenTxReq, gmpResult: GetMerklePathResult, countsAsAttempt: boolean): Promise<EntityProvenTx | undefined>
+    static readonly getProofAttemptsLimit = 8;
+    static readonly getProofMinutes = 60;
+    static async fromReq(req: EntityProvenTxReq, gmpResult: GetMerklePathResult, countsAsAttempt: boolean, maxRebroadcastAttempts = 0): Promise<EntityProvenTx | undefined>
 }
 ```
@@ -2039,7 +2727,7 @@ See also: [EntityBase](./storage.md#class-entitybase), [EntityProvenTxReq](./sto
 How high attempts can go before status is forced to invalid
 ```ts
-static getProofAttemptsLimit = 8
+static readonly getProofAttemptsLimit = 8
 ```
 ###### Property getProofMinutes
@@ -2047,7 +2735,7 @@ static getProofAttemptsLimit = 8
 How many hours we have to try for a poof
 ```ts
-static getProofMinutes = 60
+static readonly getProofMinutes = 60
 ```
 ###### Method fromReq
@@ -2057,7 +2745,7 @@ Try to create a new ProvenTx from a ProvenTxReq and GetMerkleProofResultApi
 Otherwise it returns undefined and updates req.status to either 'unknown', 'invalid', or 'unconfirmed'
 ```ts
-static async fromReq(req: EntityProvenTxReq, gmpResult: GetMerklePathResult, countsAsAttempt: boolean): Promise<EntityProvenTx | undefined>
+static async fromReq(req: EntityProvenTxReq, gmpResult: GetMerklePathResult, countsAsAttempt: boolean, maxRebroadcastAttempts = 0): Promise<EntityProvenTx | undefined>
 ```
 See also: [EntityProvenTx](./storage.md#class-entityproventx), [EntityProvenTxReq](./storage.md#class-entityproventxreq), [GetMerklePathResult](./client.md#interface-getmerklepathresult)
@@ -2095,6 +2783,7 @@ Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](
 ```ts
 export class EntityProvenTxReq extends EntityBase<TableProvenTxReq> {
+    static readonly wasBroadcastStatuses: ProvenTxReqStatus[] = ["unmined", "callback", "unconfirmed", "completed"];
     static async fromStorageTxid(storage: EntityStorage, txid: string, trx?: TrxToken): Promise<EntityProvenTxReq | undefined>
     static async fromStorageId(storage: EntityStorage, id: number, trx?: TrxToken): Promise<EntityProvenTxReq>
     static fromTxid(txid: string, rawTx: number[], inputBEEF?: number[]): EntityProvenTxReq
@@ -2144,6 +2833,14 @@ export class EntityProvenTxReq extends EntityBase<TableProvenTxReq> {
     set notified(v: boolean)
     get batch()
     set batch(v: string | undefined)
+    get wasBroadcast(): boolean
+    set wasBroadcast(v: boolean)
+    get rebroadcastAttempts(): number
+    set rebroadcastAttempts(v: number)
+    applyProofTimeout(maxRebroadcastAttempts = 0): {
+        action: "invalid" | "rebroadcast";
+        rebroadcastAttempts: number;
+    }
     override get id()
     override set id(v: number)
     override get entityName(): string
@@ -2163,7 +2860,7 @@ export class EntityProvenTxReq extends EntityBase<TableProvenTxReq> {
 }
 ```
-See also: [EntityBase](./storage.md#class-entitybase), [EntityStorage](./storage.md#type-entitystorage), [ProvenTxReqHistory](./storage.md#interface-proventxreqhistory), [ProvenTxReqHistorySummaryApi](./storage.md#interface-proventxreqhistorysummaryapi), [ProvenTxReqNotify](./storage.md#interface-proventxreqnotify), [ProvenTxReqStatus](./client.md#type-proventxreqstatus), [ReqHistoryNote](./client.md#type-reqhistorynote), [StorageProvider](./storage.md#class-storageprovider), [SyncMap](./storage.md#interface-syncmap), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TrxToken](./client.md#interface-trxtoken), [WalletStorageManager](./storage.md#class-walletstoragemanager)
+See also: [EntityBase](./storage.md#class-entitybase), [EntityStorage](./storage.md#type-entitystorage), [ProvenTxReqHistory](./storage.md#interface-proventxreqhistory), [ProvenTxReqHistorySummaryApi](./storage.md#interface-proventxreqhistorysummaryapi), [ProvenTxReqNotify](./storage.md#interface-proventxreqnotify), [ProvenTxReqStatus](./client.md#type-proventxreqstatus), [ReqHistoryNote](./client.md#interface-reqhistorynote), [StorageProvider](./storage.md#class-storageprovider), [SyncMap](./storage.md#interface-syncmap), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TrxToken](./client.md#interface-trxtoken), [WalletStorageManager](./storage.md#class-walletstoragemanager)
 ###### Method addHistoryNote
@@ -2173,7 +2870,7 @@ Notes with identical property values to an existing note are ignored.
 ```ts
 addHistoryNote(note: ReqHistoryNote, noDupes?: boolean)
 ```
-See also: [ReqHistoryNote](./client.md#type-reqhistorynote)
+See also: [ReqHistoryNote](./client.md#interface-reqhistorynote)
 Argument Details
@@ -2299,28 +2996,28 @@ export class EntitySyncState extends EntityBase<TableSyncState> {
   to storage: ${c.toStorageIdentityKey}
   for user: ${c.userIdentityKey}
 `;
-        if (c.user)
+        if (c.user != null)
             log += `  USER activeStorage ${c.user.activeStorage}\n`;
-        if (!!c.provenTxs) {
-            log += `  PROVEN_TXS\n`;
+        if (c.provenTxs != null) {
+            log += "  PROVEN_TXS\n";
             for (const r of c.provenTxs) {
                 log += `    ${r.provenTxId} ${r.txid}\n`;
             }
         }
-        if (!!c.provenTxReqs) {
-            log += `  PROVEN_TX_REQS\n`;
+        if (c.provenTxReqs != null) {
+            log += "  PROVEN_TX_REQS\n";
             for (const r of c.provenTxReqs) {
                 log += `    ${r.provenTxReqId} ${r.txid} ${r.status} ${r.provenTxId || ""}\n`;
             }
         }
-        if (!!c.transactions) {
-            log += `  TRANSACTIONS\n`;
+        if (c.transactions != null) {
+            log += "  TRANSACTIONS\n";
             for (const r of c.transactions) {
                 log += `    ${r.transactionId} ${r.txid} ${r.status} ${r.provenTxId || ""} sats:${r.satoshis}\n`;
             }
         }
-        if (!!c.outputs) {
-            log += `  OUTPUTS\n`;
+        if (c.outputs != null) {
+            log += "  OUTPUTS\n";
             for (const r of c.outputs) {
                 log += `    ${r.outputId} ${r.txid}.${r.vout} ${r.transactionId} ${r.spendable ? "spendable" : ""} sats:${r.satoshis}\n`;
             }
@@ -2642,11 +3339,49 @@ the party making requests of the remote service.
 For details of the API implemented, follow the "See also" link for the `WalletStorageProvider` interface.
 ```ts
-export class StorageClient implements WalletStorageProvider {
+export class StorageClient extends StorageClientBase {
+    constructor(wallet: WalletInterface, endpointUrl: string)
+    protected async rpcCall<T>(method: string, params: unknown[]): Promise<T>
+}
+```
+See also: [StorageClientBase](./storage.md#class-storageclientbase)
+###### Method rpcCall
+Make a JSON-RPC call to the remote server.
+```ts
+protected async rpcCall<T>(method: string, params: unknown[]): Promise<T>
+```
+Argument Details
++ **method**
+  + The WalletStorage method name to call.
++ **params**
+  + The array of parameters to pass to the method in order.
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Class: StorageClientBase
+Abstract base class shared by `StorageClient` and `StorageMobile`.
+Contains all `WalletStorageProvider` method implementations and entity-validation
+helpers. Subclasses only need to provide `rpcCall`, which differs between
+the full (logger-aware) and mobile (lightweight) variants.
+```ts
+export abstract class StorageClientBase implements WalletStorageProvider {
     readonly endpointUrl: string;
+    protected readonly authClient: AuthFetch;
+    protected nextId = 1;
     public settings?: TableSettings;
     constructor(wallet: WalletInterface, endpointUrl: string)
     isStorageProvider(): boolean
+    protected abstract rpcCall<T>(method: string, params: unknown[]): Promise<T>;
     isAvailable(): boolean
     getSettings(): TableSettings
     async makeAvailable(): Promise<TableSettings>
@@ -2686,7 +3421,7 @@ export class StorageClient implements WalletStorageProvider {
 }
 ```
-See also: [AuthId](./client.md#interface-authid), [EntityTimeStamp](./client.md#interface-entitytimestamp), [FindCertificatesArgs](./client.md#interface-findcertificatesargs), [FindOutputBasketsArgs](./client.md#interface-findoutputbasketsargs), [FindOutputsArgs](./client.md#interface-findoutputsargs), [FindProvenTxReqsArgs](./client.md#interface-findproventxreqsargs), [ProcessSyncChunkResult](./client.md#interface-processsyncchunkresult), [RequestSyncChunkArgs](./client.md#interface-requestsyncchunkargs), [StorageCreateActionResult](./client.md#interface-storagecreateactionresult), [StorageInternalizeActionResult](./client.md#interface-storageinternalizeactionresult), [StorageProcessActionArgs](./client.md#interface-storageprocessactionargs), [StorageProcessActionResults](./client.md#interface-storageprocessactionresults), [SyncChunk](./client.md#interface-syncchunk), [TableCertificateX](./storage.md#interface-tablecertificatex), [TableOutput](./storage.md#interface-tableoutput), [TableOutputBasket](./storage.md#interface-tableoutputbasket), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TableSettings](./storage.md#interface-tablesettings), [TableSyncState](./storage.md#interface-tablesyncstate), [TableUser](./storage.md#interface-tableuser), [UpdateProvenTxReqWithNewProvenTxArgs](./client.md#interface-updateproventxreqwithnewproventxargs), [UpdateProvenTxReqWithNewProvenTxResult](./client.md#interface-updateproventxreqwithnewproventxresult), [WalletServices](./client.md#interface-walletservices), [WalletStorageProvider](./client.md#interface-walletstorageprovider), [createAction](./storage.md#function-createaction), [getSyncChunk](./storage.md#function-getsyncchunk), [internalizeAction](./storage.md#function-internalizeaction), [listActions](./storage.md#function-listactions), [listCertificates](./storage.md#function-listcertificates), [listOutputs](./storage.md#function-listoutputs), [processAction](./storage.md#function-processaction)
+See also: [AuthId](./client.md#interface-authid), [EntityTimeStamp](./client.md#interface-entitytimestamp), [FindCertificatesArgs](./client.md#interface-findcertificatesargs), [FindOutputBasketsArgs](./client.md#interface-findoutputbasketsargs), [FindOutputsArgs](./client.md#interface-findoutputsargs), [FindProvenTxReqsArgs](./client.md#interface-findproventxreqsargs), [ProcessSyncChunkResult](./client.md#interface-processsyncchunkresult), [RequestSyncChunkArgs](./client.md#interface-requestsyncchunkargs), [StorageCreateActionResult](./client.md#interface-storagecreateactionresult), [StorageInternalizeActionResult](./client.md#interface-storageinternalizeactionresult), [StorageProcessActionArgs](./client.md#interface-storageprocessactionargs), [StorageProcessActionResults](./client.md#interface-storageprocessactionresults), [SyncChunk](./client.md#interface-syncchunk), [TableCertificateX](./storage.md#interface-tablecertificatex), [TableOutput](./storage.md#interface-tableoutput), [TableOutputBasket](./storage.md#interface-tableoutputbasket), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TableSettings](./storage.md#interface-tablesettings), [TableSyncState](./storage.md#interface-tablesyncstate), [TableUser](./storage.md#interface-tableuser), [UpdateProvenTxReqWithNewProvenTxArgs](./client.md#interface-updateproventxreqwithnewproventxargs), [UpdateProvenTxReqWithNewProvenTxResult](./client.md#interface-updateproventxreqwithnewproventxresult), [WalletServices](./client.md#interface-walletservices), [WalletStorageProvider](./client.md#interface-walletstorageprovider), [createAction](./storage.md#function-createaction), [getSyncChunk](./storage.md#function-getsyncchunk), [internalizeAction](./storage.md#function-internalizeaction), [listActions](./storage.md#function-listactions), [listCertificates](./storage.md#function-listcertificates), [listOutputs](./storage.md#function-listoutputs), [processAction](./storage.md#function-processaction), [validateDate](./storage.md#function-validatedate), [validateEntities](./storage.md#function-validateentities), [validateEntity](./storage.md#function-validateentity)
 ###### Method abortAction
@@ -3176,6 +3911,22 @@ This must match the `AuthFetch` identity securing the remote conneciton.
 + **args**
   + original wallet `relinquishOutput` args.
+###### Method rpcCall
+Make a JSON-RPC call to the remote server.
+Implemented differently by each subclass (with or without logger support).
+```ts
+protected abstract rpcCall<T>(method: string, params: unknown[]): Promise<T>
+```
+Argument Details
++ **method**
+  + The WalletStorage method name to call.
++ **params**
+  + The array of parameters to pass to the method in order.
 ###### Method setActive
 Ensures up-to-date wallet data replication to all configured backup storage providers,
@@ -3316,7 +4067,7 @@ export class StorageIdb extends StorageProvider implements WalletStorageProvider
     async insertTxLabelMap(labelMap: TableTxLabelMap, trx?: TrxToken): Promise<void>
     async insertUser(user: TableUser, trx?: TrxToken): Promise<number>
     async updateIdb<T>(id: number | number[], update: Partial<T>, keyProp: string, storeName: string, trx?: TrxToken): Promise<number>
-    async updateIdbKey<T>(key: (number | string)[], update: Partial<T>, keyProps: string[], storeName: string, trx?: TrxToken): Promise<number>
+    async updateIdbKey<T>(key: Array<number | string>, update: Partial<T>, keyProps: string[], storeName: string, trx?: TrxToken): Promise<number>
     async updateCertificate(id: number, update: Partial<TableCertificate>, trx?: TrxToken): Promise<number>
     async updateCertificateField(certificateId: number, fieldName: string, update: Partial<TableCertificateField>, trx?: TrxToken): Promise<number>
     async updateCommission(id: number, update: Partial<TableCommission>, trx?: TrxToken): Promise<number>
@@ -3398,7 +4149,7 @@ export class StorageIdb extends StorageProvider implements WalletStorageProvider
 }
 ```
-See also: [AuthId](./client.md#interface-authid), [DBType](./storage.md#type-dbtype), [EntityTimeStamp](./client.md#interface-entitytimestamp), [FindCertificateFieldsArgs](./client.md#interface-findcertificatefieldsargs), [FindCertificatesArgs](./client.md#interface-findcertificatesargs), [FindCommissionsArgs](./client.md#interface-findcommissionsargs), [FindForUserSincePagedArgs](./client.md#interface-findforusersincepagedargs), [FindMonitorEventsArgs](./client.md#interface-findmonitoreventsargs), [FindOutputBasketsArgs](./client.md#interface-findoutputbasketsargs), [FindOutputTagMapsArgs](./client.md#interface-findoutputtagmapsargs), [FindOutputTagsArgs](./client.md#interface-findoutputtagsargs), [FindOutputsArgs](./client.md#interface-findoutputsargs), [FindProvenTxReqsArgs](./client.md#interface-findproventxreqsargs), [FindProvenTxsArgs](./client.md#interface-findproventxsargs), [FindSyncStatesArgs](./client.md#interface-findsyncstatesargs), [FindTransactionsArgs](./client.md#interface-findtransactionsargs), [FindTxLabelMapsArgs](./client.md#interface-findtxlabelmapsargs), [FindTxLabelsArgs](./client.md#interface-findtxlabelsargs), [FindUsersArgs](./client.md#interface-findusersargs), [ProvenOrRawTx](./client.md#interface-provenorrawtx), [PurgeParams](./client.md#interface-purgeparams), [PurgeResults](./client.md#interface-purgeresults), [StorageAdminStats](./storage.md#interface-storageadminstats), [StorageIdbOptions](./storage.md#interface-storageidboptions), [StorageIdbSchema](./storage.md#interface-storageidbschema), [StorageProvider](./storage.md#class-storageprovider), [TableCertificate](./storage.md#interface-tablecertificate), [TableCertificateField](./storage.md#interface-tablecertificatefield), [TableCertificateX](./storage.md#interface-tablecertificatex), [TableCommission](./storage.md#interface-tablecommission), [TableMonitorEvent](./storage.md#interface-tablemonitorevent), [TableOutput](./storage.md#interface-tableoutput), [TableOutputBasket](./storage.md#interface-tableoutputbasket), [TableOutputTag](./storage.md#interface-tableoutputtag), [TableOutputTagMap](./storage.md#interface-tableoutputtagmap), [TableProvenTx](./storage.md#interface-tableproventx), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TableSettings](./storage.md#interface-tablesettings), [TableSyncState](./storage.md#interface-tablesyncstate), [TableTransaction](./storage.md#interface-tabletransaction), [TableTxLabel](./storage.md#interface-tabletxlabel), [TableTxLabelMap](./storage.md#interface-tabletxlabelmap), [TableUser](./storage.md#interface-tableuser), [TrxToken](./client.md#interface-trxtoken), [WalletStorageProvider](./client.md#interface-walletstorageprovider), [listActions](./storage.md#function-listactions), [listOutputs](./storage.md#function-listoutputs), [purgeData](./storage.md#function-purgedata), [reviewStatus](./storage.md#function-reviewstatus)
+See also: [AuthId](./client.md#interface-authid), [DBType](./storage.md#type-dbtype), [EntityTimeStamp](./client.md#interface-entitytimestamp), [FindCertificateFieldsArgs](./client.md#interface-findcertificatefieldsargs), [FindCertificatesArgs](./client.md#interface-findcertificatesargs), [FindCommissionsArgs](./client.md#interface-findcommissionsargs), [FindForUserSincePagedArgs](./client.md#interface-findforusersincepagedargs), [FindMonitorEventsArgs](./client.md#interface-findmonitoreventsargs), [FindOutputBasketsArgs](./client.md#interface-findoutputbasketsargs), [FindOutputTagMapsArgs](./client.md#interface-findoutputtagmapsargs), [FindOutputTagsArgs](./client.md#interface-findoutputtagsargs), [FindOutputsArgs](./client.md#interface-findoutputsargs), [FindProvenTxReqsArgs](./client.md#interface-findproventxreqsargs), [FindProvenTxsArgs](./client.md#interface-findproventxsargs), [FindSyncStatesArgs](./client.md#interface-findsyncstatesargs), [FindTransactionsArgs](./client.md#interface-findtransactionsargs), [FindTxLabelMapsArgs](./client.md#interface-findtxlabelmapsargs), [FindTxLabelsArgs](./client.md#interface-findtxlabelsargs), [FindUsersArgs](./client.md#interface-findusersargs), [ProvenOrRawTx](./client.md#interface-provenorrawtx), [PurgeParams](./client.md#interface-purgeparams), [PurgeResults](./client.md#interface-purgeresults), [StorageAdminStats](./storage.md#interface-storageadminstats), [StorageIdbOptions](./storage.md#interface-storageidboptions), [StorageIdbSchema](./storage.md#interface-storageidbschema), [StorageProvider](./storage.md#class-storageprovider), [TableCertificate](./storage.md#interface-tablecertificate), [TableCertificateField](./storage.md#interface-tablecertificatefield), [TableCertificateX](./storage.md#interface-tablecertificatex), [TableCommission](./storage.md#interface-tablecommission), [TableMonitorEvent](./storage.md#interface-tablemonitorevent), [TableOutput](./storage.md#interface-tableoutput), [TableOutputBasket](./storage.md#interface-tableoutputbasket), [TableOutputTag](./storage.md#interface-tableoutputtag), [TableOutputTagMap](./storage.md#interface-tableoutputtagmap), [TableProvenTx](./storage.md#interface-tableproventx), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TableSettings](./storage.md#interface-tablesettings), [TableSyncState](./storage.md#interface-tablesyncstate), [TableTransaction](./storage.md#interface-tabletransaction), [TableTxLabel](./storage.md#interface-tabletxlabel), [TableTxLabelMap](./storage.md#interface-tabletxlabelmap), [TableUser](./storage.md#interface-tableuser), [TrxToken](./client.md#interface-trxtoken), [WalletStorageProvider](./client.md#interface-walletstorageprovider), [listActions](./storage.md#function-listactions), [listOutputs](./storage.md#function-listoutputs), [purgeData](./storage.md#function-purgedata), [reviewStatus](./storage.md#function-reviewstatus), [validateEntities](./storage.md#function-validateentities), [validateEntity](./storage.md#function-validateentity)
 ###### Method allocateChangeInput
@@ -3521,6 +4272,12 @@ Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](
 export class StorageKnex extends StorageProvider implements WalletStorageProvider {
     knex: Knex;
     constructor(options: StorageKnexOptions)
+    override getTransactionService(): TransactionService | undefined
+    override async makeAvailable(): Promise<TableSettings>
+    async provenTxsTableName(): Promise<string>
+    async provenTxReqsTableName(): Promise<string>
+    override async insertLegacyTransaction(tx: TableTransaction, trx?: TrxToken): Promise<number>
+    override async insertLegacyTxLabelMap(labelMap: TableTxLabelMap, trx?: TrxToken): Promise<void>
     async readSettings(): Promise<TableSettings>
     override async getProvenOrRawTx(txid: string, trx?: TrxToken): Promise<ProvenOrRawTx>
     dbTypeSubstring(source: string, fromOffset: number, forLength?: number)
@@ -3574,9 +4331,9 @@ export class StorageKnex extends StorageProvider implements WalletStorageProvide
     findOutputsQuery(args: FindOutputsArgs, count?: boolean): Knex.QueryBuilder
     findOutputTagMapsQuery(args: FindOutputTagMapsArgs): Knex.QueryBuilder
     findOutputTagsQuery(args: FindOutputTagsArgs): Knex.QueryBuilder
-    findProvenTxReqsQuery(args: FindProvenTxReqsArgs): Knex.QueryBuilder
-    findProvenTxsQuery(args: FindProvenTxsArgs): Knex.QueryBuilder
-    findStaleMerkleRootsQuery(args: FindStaleMerkleRootsArgs): Knex.QueryBuilder
+    findProvenTxReqsQuery(args: FindProvenTxReqsArgs, tableName = "proven_tx_reqs"): Knex.QueryBuilder
+    findProvenTxsQuery(args: FindProvenTxsArgs, tableName = "proven_txs"): Knex.QueryBuilder
+    findStaleMerkleRootsQuery(args: FindStaleMerkleRootsArgs, tableName = "proven_txs"): Knex.QueryBuilder
     findSyncStatesQuery(args: FindSyncStatesArgs): Knex.QueryBuilder
     findTransactionsQuery(args: FindTransactionsArgs, count?: boolean): Knex.QueryBuilder
     findTxLabelMapsQuery(args: FindTxLabelMapsArgs): Knex.QueryBuilder
@@ -3598,6 +4355,11 @@ export class StorageKnex extends StorageProvider implements WalletStorageProvide
     override async findStaleMerkleRoots(args: FindStaleMerkleRootsArgs): Promise<string[]>
     override async findSyncStates(args: FindSyncStatesArgs): Promise<TableSyncState[]>
     override async findTransactions(args: FindTransactionsArgs): Promise<TableTransaction[]>
+    override async findLegacyTransactions(args: FindTransactionsArgs): Promise<TableTransaction[]>
+    override async updateLegacyTransaction(id: number | number[], update: Partial<TableTransaction>, trx?: TrxToken): Promise<number>
+    override async markOutputAsSpentBy(outputId: number, update: Partial<TableOutput>, trx?: TrxToken): Promise<void>
+    override async disableForeignKeys(): Promise<void>
+    override async enableForeignKeys(): Promise<void>
     override async findTxLabelMaps(args: FindTxLabelMapsArgs): Promise<TableTxLabelMap[]>
     override async findTxLabels(args: FindTxLabelsArgs): Promise<TableTxLabel[]>
     override async findUsers(args: FindUsersArgs): Promise<TableUser[]>
@@ -3625,7 +4387,7 @@ export class StorageKnex extends StorageProvider implements WalletStorageProvide
     override async transaction<T>(scope: (trx: TrxToken) => Promise<T>, trx?: TrxToken): Promise<T>
     toDb(trx?: TrxToken)
     async validateRawTransaction(t: TableTransaction, trx?: TrxToken): Promise<void>
-    _verifiedReadyForDatabaseAccess: boolean = false;
+    _verifiedReadyForDatabaseAccess = false;
     async verifyReadyForDatabaseAccess(trx?: TrxToken): Promise<DBType>
     validatePartialForUpdate<T extends EntityTimeStamp>(update: Partial<T>, dateFields?: string[], booleanFields?: string[]): Partial<T>
     async validateEntityForInsert<T extends EntityTimeStamp>(entity: T, trx?: TrxToken, dateFields?: string[], booleanFields?: string[]): Promise<any>
@@ -3658,7 +4420,7 @@ export class StorageKnex extends StorageProvider implements WalletStorageProvide
             orderDescending: true,
             paged: { limit: 1 }
         }));
-        const monitorStats: ServicesCallHistory | undefined = monitorEvent ? JSON.parse(monitorEvent.details!) : undefined;
+        const monitorStats: ServicesCallHistory | undefined = (monitorEvent != null) ? JSON.parse(monitorEvent.details!) : undefined;
         const servicesStats = this.getServices().getServicesCallHistory(true);
         const one_day_ago = new Date(Date.now() - 24 * 60 * 60 * 1000).toISOString();
         const one_week_ago = new Date(Date.now() - 7 * 24 * 60 * 60 * 1000).toISOString();
@@ -3813,7 +4575,7 @@ select
 }
 ```
-See also: [AdminStatsResult](./storage.md#interface-adminstatsresult), [AuthId](./client.md#interface-authid), [DBType](./storage.md#type-dbtype), [EntityTimeStamp](./client.md#interface-entitytimestamp), [FindCertificateFieldsArgs](./client.md#interface-findcertificatefieldsargs), [FindCertificatesArgs](./client.md#interface-findcertificatesargs), [FindCommissionsArgs](./client.md#interface-findcommissionsargs), [FindForUserSincePagedArgs](./client.md#interface-findforusersincepagedargs), [FindMonitorEventsArgs](./client.md#interface-findmonitoreventsargs), [FindOutputBasketsArgs](./client.md#interface-findoutputbasketsargs), [FindOutputTagMapsArgs](./client.md#interface-findoutputtagmapsargs), [FindOutputTagsArgs](./client.md#interface-findoutputtagsargs), [FindOutputsArgs](./client.md#interface-findoutputsargs), [FindPartialSincePagedArgs](./client.md#interface-findpartialsincepagedargs), [FindProvenTxReqsArgs](./client.md#interface-findproventxreqsargs), [FindProvenTxsArgs](./client.md#interface-findproventxsargs), [FindStaleMerkleRootsArgs](./client.md#interface-findstalemerklerootsargs), [FindSyncStatesArgs](./client.md#interface-findsyncstatesargs), [FindTransactionsArgs](./client.md#interface-findtransactionsargs), [FindTxLabelMapsArgs](./client.md#interface-findtxlabelmapsargs), [FindTxLabelsArgs](./client.md#interface-findtxlabelsargs), [FindUsersArgs](./client.md#interface-findusersargs), [ProvenOrRawTx](./client.md#interface-provenorrawtx), [PurgeParams](./client.md#interface-purgeparams), [PurgeResults](./client.md#interface-purgeresults), [ServicesCallHistory](./client.md#type-servicescallhistory), [StorageKnexOptions](./storage.md#interface-storageknexoptions), [StorageProvider](./storage.md#class-storageprovider), [TableCertificate](./storage.md#interface-tablecertificate), [TableCertificateField](./storage.md#interface-tablecertificatefield), [TableCertificateX](./storage.md#interface-tablecertificatex), [TableCommission](./storage.md#interface-tablecommission), [TableMonitorEvent](./storage.md#interface-tablemonitorevent), [TableOutput](./storage.md#interface-tableoutput), [TableOutputBasket](./storage.md#interface-tableoutputbasket), [TableOutputTag](./storage.md#interface-tableoutputtag), [TableOutputTagMap](./storage.md#interface-tableoutputtagmap), [TableProvenTx](./storage.md#interface-tableproventx), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TableSettings](./storage.md#interface-tablesettings), [TableSyncState](./storage.md#interface-tablesyncstate), [TableTransaction](./storage.md#interface-tabletransaction), [TableTxLabel](./storage.md#interface-tabletxlabel), [TableTxLabelMap](./storage.md#interface-tabletxlabelmap), [TableUser](./storage.md#interface-tableuser), [TrxToken](./client.md#interface-trxtoken), [WERR_NOT_IMPLEMENTED](./client.md#class-werr_not_implemented), [WalletStorageProvider](./client.md#interface-walletstorageprovider), [listActions](./storage.md#function-listactions), [listOutputs](./storage.md#function-listoutputs), [purgeData](./storage.md#function-purgedata), [reviewStatus](./storage.md#function-reviewstatus), [verifyOneOrNone](./client.md#function-verifyoneornone)
+See also: [AdminStatsResult](./storage.md#interface-adminstatsresult), [AuthId](./client.md#interface-authid), [DBType](./storage.md#type-dbtype), [EntityTimeStamp](./client.md#interface-entitytimestamp), [FindCertificateFieldsArgs](./client.md#interface-findcertificatefieldsargs), [FindCertificatesArgs](./client.md#interface-findcertificatesargs), [FindCommissionsArgs](./client.md#interface-findcommissionsargs), [FindForUserSincePagedArgs](./client.md#interface-findforusersincepagedargs), [FindMonitorEventsArgs](./client.md#interface-findmonitoreventsargs), [FindOutputBasketsArgs](./client.md#interface-findoutputbasketsargs), [FindOutputTagMapsArgs](./client.md#interface-findoutputtagmapsargs), [FindOutputTagsArgs](./client.md#interface-findoutputtagsargs), [FindOutputsArgs](./client.md#interface-findoutputsargs), [FindPartialSincePagedArgs](./client.md#interface-findpartialsincepagedargs), [FindProvenTxReqsArgs](./client.md#interface-findproventxreqsargs), [FindProvenTxsArgs](./client.md#interface-findproventxsargs), [FindStaleMerkleRootsArgs](./client.md#interface-findstalemerklerootsargs), [FindSyncStatesArgs](./client.md#interface-findsyncstatesargs), [FindTransactionsArgs](./client.md#interface-findtransactionsargs), [FindTxLabelMapsArgs](./client.md#interface-findtxlabelmapsargs), [FindTxLabelsArgs](./client.md#interface-findtxlabelsargs), [FindUsersArgs](./client.md#interface-findusersargs), [ProvenOrRawTx](./client.md#interface-provenorrawtx), [PurgeParams](./client.md#interface-purgeparams), [PurgeResults](./client.md#interface-purgeresults), [ServicesCallHistory](./client.md#interface-servicescallhistory), [StorageKnexOptions](./storage.md#interface-storageknexoptions), [StorageProvider](./storage.md#class-storageprovider), [TableCertificate](./storage.md#interface-tablecertificate), [TableCertificateField](./storage.md#interface-tablecertificatefield), [TableCertificateX](./storage.md#interface-tablecertificatex), [TableCommission](./storage.md#interface-tablecommission), [TableMonitorEvent](./storage.md#interface-tablemonitorevent), [TableOutput](./storage.md#interface-tableoutput), [TableOutputBasket](./storage.md#interface-tableoutputbasket), [TableOutputTag](./storage.md#interface-tableoutputtag), [TableOutputTagMap](./storage.md#interface-tableoutputtagmap), [TableProvenTx](./storage.md#interface-tableproventx), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TableSettings](./storage.md#interface-tablesettings), [TableSyncState](./storage.md#interface-tablesyncstate), [TableTransaction](./storage.md#interface-tabletransaction), [TableTxLabel](./storage.md#interface-tabletxlabel), [TableTxLabelMap](./storage.md#interface-tabletxlabelmap), [TableUser](./storage.md#interface-tableuser), [TransactionService](./storage.md#class-transactionservice), [TrxToken](./client.md#interface-trxtoken), [WERR_NOT_IMPLEMENTED](./client.md#class-werr_not_implemented), [WalletStorageProvider](./client.md#interface-walletstorageprovider), [listActions](./storage.md#function-listactions), [listOutputs](./storage.md#function-listoutputs), [purgeData](./storage.md#function-purgedata), [reviewStatus](./storage.md#function-reviewstatus), [validateEntities](./storage.md#function-validateentities), [validateEntity](./storage.md#function-validateentity), [verifyOneOrNone](./client.md#function-verifyoneornone)
 ###### Method allocateChangeInput
@@ -3838,6 +4600,141 @@ AND whose transaction status is one of:
 async countChangeInputs(userId: number, basketId: number, excludeSending: boolean): Promise<number>
 ```
+###### Method disableForeignKeys
+Post-cutover SQLite: disable FK on the bare connection BEFORE opening a
+transaction. PRAGMA foreign_keys changes inside SQLite transactions are no-ops,
+so this MUST be called before `this.knex.transaction()`.
+Only acts when post-cutover AND SQLite. Pre-cutover or MySQL: no-op.
+```ts
+override async disableForeignKeys(): Promise<void>
+```
+###### Method enableForeignKeys
+Re-enable FK after the transaction opened via `disableForeignKeys()` completes.
+Only acts when post-cutover AND SQLite.
+```ts
+override async enableForeignKeys(): Promise<void>
+```
+###### Method findLegacyTransactions
+Post-cutover: queries `transactions_legacy` for unsigned/pending rows
+created by `createAction` (which have no real txid yet and therefore have no
+new-schema counterpart).  Falls back to the standard `findTransactions` pre-cutover.
+Used by `processAction.validateCommitNewTxToStorageArgs` to locate the
+unsigned transaction row by `{userId, reference}`.
+Mapping §2: legacy `unsigned` / `unprocessed` → these rows only exist in
+`transactions_legacy` post-cutover; new `transactions` has `processing` not
+`status` and no unsigned-state rows.
+```ts
+override async findLegacyTransactions(args: FindTransactionsArgs): Promise<TableTransaction[]>
+```
+See also: [FindTransactionsArgs](./client.md#interface-findtransactionsargs), [TableTransaction](./storage.md#interface-tabletransaction)
+###### Method insertLegacyTransaction
+Insert a legacy-shaped transaction row into the correct table:
+- Post-cutover: `transactions_legacy` (the renamed legacy schema table)
+- Pre-cutover:     `transactions` (the standard table, same behaviour as `insertTransaction`)
+This allows `createAction` to store unsigned rows (txid unknown) without
+conflicting with the new `transactions` table's NOT NULL txid constraint.
+A new `transactions` row + `actions` row are created later by `processAction`
+once the real txid is known.
+On SQLite, foreign key enforcement is temporarily disabled while inserting
+into `transactions_legacy` because the referenced `proven_txs` table was
+renamed to `proven_txs_legacy` during the the schema cutover. Since `provenTxId`
+is always NULL for new unsigned transactions this is semantically safe.
+```ts
+override async insertLegacyTransaction(tx: TableTransaction, trx?: TrxToken): Promise<number>
+```
+See also: [TableTransaction](./storage.md#interface-tabletransaction), [TrxToken](./client.md#interface-trxtoken)
+###### Method insertLegacyTxLabelMap
+Insert a `tx_labels_map` row for a legacy transaction that does not yet
+have a `actions.actionId`. On post-cutover SQLite, temporarily disables
+FK checks so that the legacy transactionId (which is not yet an actionId)
+can be written. processAction will repoint it via repointLabelsToActionId.
+Note: bypasses `validateEntityForInsert` (and therefore `verifyReadyForDatabaseAccess`
+which would re-enable FK checks) to ensure the PRAGMA=OFF persists across
+the insert statement.
+```ts
+override async insertLegacyTxLabelMap(labelMap: TableTxLabelMap, trx?: TrxToken): Promise<void>
+```
+See also: [TableTxLabelMap](./storage.md#interface-tabletxlabelmap), [TrxToken](./client.md#interface-trxtoken)
+###### Method makeAvailable
+Eagerly warm the `_postCutoverCache` so sync query builders such as
+`findOutputsQuery` can branch on cutover state without an extra await.
+Callers that have invoked `makeAvailable` are guaranteed the cache has
+been populated.
+```ts
+override async makeAvailable(): Promise<TableSettings>
+```
+See also: [TableSettings](./storage.md#interface-tablesettings)
+###### Method markOutputAsSpentBy
+Post-cutover SQLite: temporarily disable FK enforcement around the
+`outputs.spentBy = legacyTransactionId` UPDATE. The `outputs.spentBy` FK
+references `transactions.transactionId` after cutover, but unsigned
+transactions from `createAction` live in `transactions_legacy` (their new-schema
+counterpart is created later by `processAction`).
+IMPORTANT: We bypass `updateOutput` (and therefore `verifyReadyForDatabaseAccess`)
+because `verifyReadyForDatabaseAccess` always re-enables FK with
+`PRAGMA foreign_keys = ON`, which would undo our bypass. Instead we
+directly run the UPDATE via the raw knex handle.
+Pre-cutover or MySQL: delegates to `updateOutput` unchanged.
+Mapping §2: bridge-period spentBy references transactions_legacy during
+createAction; FK bypass covers this until processAction wires the new-schema.
+```ts
+override async markOutputAsSpentBy(outputId: number, update: Partial<TableOutput>, trx?: TrxToken): Promise<void>
+```
+See also: [TableOutput](./storage.md#interface-tableoutput), [TrxToken](./client.md#interface-trxtoken)
+###### Method provenTxReqsTableName
+Returns the canonical name of the `proven_tx_reqs` table —
+`proven_tx_reqs_legacy` post-cutover, `proven_tx_reqs` otherwise.
+Public so that helper modules (reviewStatus, purgeData) can resolve the
+correct table name without duplicating the post-cutover detection logic.
+```ts
+async provenTxReqsTableName(): Promise<string>
+```
+###### Method provenTxsTableName
+Returns the canonical name of the `proven_txs` table — `proven_txs_legacy`
+post-cutover, `proven_txs` otherwise.
+Public so that helper modules (reviewStatus, purgeData) can resolve the
+correct table name without duplicating the post-cutover detection logic.
+```ts
+async provenTxsTableName(): Promise<string>
+```
 ###### Method toDb
 Convert the standard optional `TrxToken` parameter into either a direct knex database instance,
@@ -3848,6 +4745,22 @@ toDb(trx?: TrxToken)
 ```
 See also: [TrxToken](./client.md#interface-trxtoken)
+###### Method updateLegacyTransaction
+Post-cutover: updates `transactions_legacy` (where unsigned rows live).
+Pre-cutover: delegates to `updateTransaction`.
+Used by `processAction.commitNewTxToStorage` to write back the real txid
+and status to the legacy row that was created by `createAction`.
+Mapping §2: legacy `unsigned` → `unprocessed` transition and txid write-back
+must go to `transactions_legacy` post-cutover, not new `transactions`.
+```ts
+override async updateLegacyTransaction(id: number | number[], update: Partial<TableTransaction>, trx?: TrxToken): Promise<number>
+```
+See also: [TableTransaction](./storage.md#interface-tabletransaction), [TrxToken](./client.md#interface-trxtoken)
 ###### Method validateEntities
 Helper to force uniform behavior across database engines.
@@ -3953,6 +4866,15 @@ export abstract class StorageProvider extends StorageReaderWriter implements Wal
     override isStorageProvider(): boolean
     setServices(v: WalletServices)
     getServices(): WalletServices
+    getTransactionService(): TransactionService | undefined
+    async insertLegacyTransaction(tx: TableTransaction, trx?: TrxToken): Promise<number>
+    async insertLegacyTxLabelMap(labelMap: TableTxLabelMap, trx?: TrxToken): Promise<void>
+    async findOrInsertLegacyTxLabelMap(transactionId: number, txLabelId: number, trx?: TrxToken): Promise<TableTxLabelMap>
+    async findLegacyTransactions(args: FindTransactionsArgs): Promise<TableTransaction[]>
+    async updateLegacyTransaction(id: number | number[], update: Partial<TableTransaction>, trx?: TrxToken): Promise<number>
+    async markOutputAsSpentBy(outputId: number, update: Partial<TableOutput>, trx?: TrxToken): Promise<void>
+    async disableForeignKeys(): Promise<void>
+    async enableForeignKeys(): Promise<void>
     async abortAction(auth: AuthId, args: AbortActionArgs): Promise<AbortActionResult>
     async internalizeAction(auth: AuthId, args: InternalizeActionArgs): Promise<StorageInternalizeActionResult>
     async getReqsAndBeefToShareWithWorld(txids: string[], knownTxids: string[], trx?: TrxToken): Promise<GetReqsAndBeefResult>
@@ -3982,7 +4904,7 @@ export abstract class StorageProvider extends StorageReaderWriter implements Wal
 }
 ```
-See also: [AdminStatsResult](./storage.md#interface-adminstatsresult), [AuthId](./client.md#interface-authid), [Chain](./client.md#type-chain), [EntityProvenTxReq](./storage.md#class-entityproventxreq), [FindCertificatesArgs](./client.md#interface-findcertificatesargs), [FindOutputBasketsArgs](./client.md#interface-findoutputbasketsargs), [FindOutputsArgs](./client.md#interface-findoutputsargs), [FindStaleMerkleRootsArgs](./client.md#interface-findstalemerklerootsargs), [GetReqsAndBeefResult](./storage.md#interface-getreqsandbeefresult), [PostReqsToNetworkResult](./storage.md#interface-postreqstonetworkresult), [ProcessSyncChunkResult](./client.md#interface-processsyncchunkresult), [ProvenOrRawTx](./client.md#interface-provenorrawtx), [PurgeParams](./client.md#interface-purgeparams), [PurgeResults](./client.md#interface-purgeresults), [RequestSyncChunkArgs](./client.md#interface-requestsyncchunkargs), [StorageCreateActionResult](./client.md#interface-storagecreateactionresult), [StorageFeeModel](./client.md#interface-storagefeemodel), [StorageGetBeefOptions](./client.md#interface-storagegetbeefoptions), [StorageInternalizeActionResult](./client.md#interface-storageinternalizeactionresult), [StorageProcessActionArgs](./client.md#interface-storageprocessactionargs), [StorageProcessActionResults](./client.md#interface-storageprocessactionresults), [StorageProvenOrReq](./client.md#interface-storageprovenorreq), [StorageProviderOptions](./storage.md#interface-storageprovideroptions), [StorageReaderWriter](./storage.md#class-storagereaderwriter), [SyncChunk](./client.md#interface-syncchunk), [TableCertificateX](./storage.md#interface-tablecertificatex), [TableMonitorEvent](./storage.md#interface-tablemonitorevent), [TableOutput](./storage.md#interface-tableoutput), [TableOutputBasket](./storage.md#interface-tableoutputbasket), [TableOutputTag](./storage.md#interface-tableoutputtag), [TableOutputX](./storage.md#interface-tableoutputx), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TableProvenTxReqDynamics](./storage.md#interface-tableproventxreqdynamics), [TableTxLabel](./storage.md#interface-tabletxlabel), [TableUser](./storage.md#interface-tableuser), [TransactionStatus](./client.md#type-transactionstatus), [TrxToken](./client.md#interface-trxtoken), [UpdateProvenTxReqWithNewProvenTxArgs](./client.md#interface-updateproventxreqwithnewproventxargs), [UpdateProvenTxReqWithNewProvenTxResult](./client.md#interface-updateproventxreqwithnewproventxresult), [WalletServices](./client.md#interface-walletservices), [WalletStorageProvider](./client.md#interface-walletstorageprovider), [attemptToPostReqsToNetwork](./storage.md#function-attempttopostreqstonetwork), [createAction](./storage.md#function-createaction), [getBeefForTransaction](./storage.md#function-getbeeffortransaction), [internalizeAction](./storage.md#function-internalizeaction), [listActions](./storage.md#function-listactions), [listCertificates](./storage.md#function-listcertificates), [listOutputs](./storage.md#function-listoutputs), [logger](./client.md#variable-logger), [processAction](./storage.md#function-processaction), [purgeData](./storage.md#function-purgedata), [reviewStatus](./storage.md#function-reviewstatus)
+See also: [AdminStatsResult](./storage.md#interface-adminstatsresult), [AuthId](./client.md#interface-authid), [Chain](./client.md#type-chain), [EntityProvenTxReq](./storage.md#class-entityproventxreq), [FindCertificatesArgs](./client.md#interface-findcertificatesargs), [FindOutputBasketsArgs](./client.md#interface-findoutputbasketsargs), [FindOutputsArgs](./client.md#interface-findoutputsargs), [FindStaleMerkleRootsArgs](./client.md#interface-findstalemerklerootsargs), [FindTransactionsArgs](./client.md#interface-findtransactionsargs), [GetReqsAndBeefResult](./storage.md#interface-getreqsandbeefresult), [PostReqsToNetworkResult](./storage.md#interface-postreqstonetworkresult), [ProcessSyncChunkResult](./client.md#interface-processsyncchunkresult), [ProvenOrRawTx](./client.md#interface-provenorrawtx), [PurgeParams](./client.md#interface-purgeparams), [PurgeResults](./client.md#interface-purgeresults), [RequestSyncChunkArgs](./client.md#interface-requestsyncchunkargs), [StorageCreateActionResult](./client.md#interface-storagecreateactionresult), [StorageFeeModel](./client.md#interface-storagefeemodel), [StorageGetBeefOptions](./client.md#interface-storagegetbeefoptions), [StorageInternalizeActionResult](./client.md#interface-storageinternalizeactionresult), [StorageProcessActionArgs](./client.md#interface-storageprocessactionargs), [StorageProcessActionResults](./client.md#interface-storageprocessactionresults), [StorageProvenOrReq](./client.md#interface-storageprovenorreq), [StorageProviderOptions](./storage.md#interface-storageprovideroptions), [StorageReaderWriter](./storage.md#class-storagereaderwriter), [SyncChunk](./client.md#interface-syncchunk), [TableCertificateX](./storage.md#interface-tablecertificatex), [TableMonitorEvent](./storage.md#interface-tablemonitorevent), [TableOutput](./storage.md#interface-tableoutput), [TableOutputBasket](./storage.md#interface-tableoutputbasket), [TableOutputTag](./storage.md#interface-tableoutputtag), [TableOutputX](./storage.md#interface-tableoutputx), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TableProvenTxReqDynamics](./storage.md#interface-tableproventxreqdynamics), [TableTransaction](./storage.md#interface-tabletransaction), [TableTxLabel](./storage.md#interface-tabletxlabel), [TableTxLabelMap](./storage.md#interface-tabletxlabelmap), [TableUser](./storage.md#interface-tableuser), [TransactionService](./storage.md#class-transactionservice), [TransactionStatus](./client.md#type-transactionstatus), [TrxToken](./client.md#interface-trxtoken), [UpdateProvenTxReqWithNewProvenTxArgs](./client.md#interface-updateproventxreqwithnewproventxargs), [UpdateProvenTxReqWithNewProvenTxResult](./client.md#interface-updateproventxreqwithnewproventxresult), [WalletServices](./client.md#interface-walletservices), [WalletStorageProvider](./client.md#interface-walletstorageprovider), [attemptToPostReqsToNetwork](./storage.md#function-attempttopostreqstonetwork), [createAction](./storage.md#function-createaction), [getBeefForTransaction](./storage.md#function-getbeeffortransaction), [internalizeAction](./storage.md#function-internalizeaction), [listActions](./storage.md#function-listactions), [listCertificates](./storage.md#function-listcertificates), [listOutputs](./storage.md#function-listoutputs), [logger](./client.md#variable-logger), [processAction](./storage.md#function-processaction), [purgeData](./storage.md#function-purgedata), [reviewStatus](./storage.md#function-reviewstatus)
 ###### Method confirmSpendableOutputs
@@ -4001,44 +4923,182 @@ Returns
 object with invalidSpendableOutputs array. A good result is an empty array.
-###### Method getProvenOrReq
+###### Method disableForeignKeys
-Checks if txid is a known valid ProvenTx and returns it if found.
-Next checks if txid is a current ProvenTxReq and returns that if found.
-If `newReq` is provided and an existing ProvenTxReq isn't found,
-use `newReq` to create a new ProvenTxReq.
+Disable FK enforcement on the underlying database connection.
-This is safe "findOrInsert" operation using retry if unique index constraint
-is violated by a race condition insert.
+No-op on non-SQLite or pre-cutover databases. On post-cutover SQLite,
+`StorageKnex` overrides this to run `PRAGMA foreign_keys = OFF` on the
+bare knex connection BEFORE a transaction is opened (since PRAGMA changes
+inside SQLite transactions are silently ignored).
+Must be paired with a `enableForeignKeys()` call in a finally block.
 ```ts
-async getProvenOrReq(txid: string, newReq?: TableProvenTxReq, trx?: TrxToken): Promise<StorageProvenOrReq>
+async disableForeignKeys(): Promise<void>
 ```
-See also: [StorageProvenOrReq](./client.md#interface-storageprovenorreq), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TrxToken](./client.md#interface-trxtoken)
-###### Method getReqsAndBeefToShareWithWorld
+###### Method enableForeignKeys
-Given an array of transaction txids with current ProvenTxReq ready-to-share status,
-lookup their ProvenTxReqApi req records.
-For the txids with reqs and status still ready to send construct a single merged beef.
+Re-enable FK enforcement on the underlying database connection.
+Counterpart to `disableForeignKeys()`.
 ```ts
-async getReqsAndBeefToShareWithWorld(txids: string[], knownTxids: string[], trx?: TrxToken): Promise<GetReqsAndBeefResult>
+async enableForeignKeys(): Promise<void>
 ```
-See also: [GetReqsAndBeefResult](./storage.md#interface-getreqsandbeefresult), [TrxToken](./client.md#interface-trxtoken)
-###### Method getValidBeefForKnownTxid
+###### Method findLegacyTransactions
-Pulls data from storage to build a valid beef for a txid.
+Find legacy-shaped transaction rows from the appropriate table.
-Optionally merges the data into an existing beef.
-Optionally requires a minimum number of proof levels.
+Post-cutover: queries `transactions_legacy` (the renamed legacy schema
+table that holds unsigned/unprocessed rows without a real txid).
+Pre-cutover (or on providers that do not support the the new schema): falls back
+to the standard `findTransactions` which targets the `transactions` table.
-```ts
+Used by `processAction.validateCommitNewTxToStorageArgs` to locate the
+unsigned transaction row created by `createAction` via `insertLegacyTransaction`.
+StorageKnex overrides this to route to `transactions_legacy` when the
+table exists (post-cutover), otherwise falls through to `findTransactions`.
+```ts
+async findLegacyTransactions(args: FindTransactionsArgs): Promise<TableTransaction[]>
+```
+See also: [FindTransactionsArgs](./client.md#interface-findtransactionsargs), [TableTransaction](./storage.md#interface-tabletransaction)
+###### Method findOrInsertLegacyTxLabelMap
+Find-or-insert a `tx_labels_map` row using `insertLegacyTxLabelMap` so
+that post-cutover FK constraints are bypassed for new unsigned transactions.
+Mirrors the logic of `findOrInsertTxLabelMap` (StorageReaderWriter) but
+delegates the insert step to `insertLegacyTxLabelMap`.
+```ts
+async findOrInsertLegacyTxLabelMap(transactionId: number, txLabelId: number, trx?: TrxToken): Promise<TableTxLabelMap>
+```
+See also: [TableTxLabelMap](./storage.md#interface-tabletxlabelmap), [TrxToken](./client.md#interface-trxtoken)
+###### Method getReqsAndBeefToShareWithWorld
+Given an array of transaction txids with current ProvenTxReq ready-to-share status,
+lookup their ProvenTxReqApi req records.
+For the txids with reqs and status still ready to send construct a single merged beef.
+```ts
+async getReqsAndBeefToShareWithWorld(txids: string[], knownTxids: string[], trx?: TrxToken): Promise<GetReqsAndBeefResult>
+```
+See also: [GetReqsAndBeefResult](./storage.md#interface-getreqsandbeefresult), [TrxToken](./client.md#interface-trxtoken)
+###### Method getTransactionService
+Returns a TransactionService instance if this storage provider supports
+the the new schema (i.e. has a Knex handle). Returns undefined for providers
+that do not support the new schema layer (e.g. StorageIdb).
+StorageKnex overrides this to return `new TransactionService(this.knex)`.
+```ts
+getTransactionService(): TransactionService | undefined
+```
+See also: [TransactionService](./storage.md#class-transactionservice)
+###### Method getValidBeefForKnownTxid
+Pulls data from storage to build a valid beef for a txid.
+Optionally merges the data into an existing beef.
+Optionally requires a minimum number of proof levels.
+```ts
 async getValidBeefForKnownTxid(txid: string, mergeToBeef?: Beef, trustSelf?: TrustSelf, knownTxids?: string[], trx?: TrxToken, requiredLevels?: number): Promise<Beef>
 ```
 See also: [TrxToken](./client.md#interface-trxtoken)
+###### Method insertLegacyTransaction
+Insert a legacy-shaped transaction row.
+Post-cutover: writes into `transactions_legacy` (the renamed legacy table)
+so that `createAction` can still store unsigned rows before the real txid is
+known, without touching the new `transactions` table (which requires a non-null txid).
+Pre-cutover (or on providers that do not support the the new schema): falls back
+to the standard `insertTransaction` which targets the `transactions` table.
+StorageKnex overrides this to route to `transactions_legacy` when the table
+exists, otherwise falls through to the standard `transactions` insert.
+```ts
+async insertLegacyTransaction(tx: TableTransaction, trx?: TrxToken): Promise<number>
+```
+See also: [TableTransaction](./storage.md#interface-tabletransaction), [TrxToken](./client.md#interface-trxtoken)
+###### Method insertLegacyTxLabelMap
+Insert a `tx_labels_map` row for a legacy transaction that does not yet
+have a `actions.actionId`.
+Post-cutover the `tx_labels_map.transactionId` column has a FK to
+`actions.actionId`. When `createAction` writes labels against a legacy
+transactionId (before processAction creates the actions row), the FK
+cannot be satisfied. This shim bypasses that constraint temporarily.
+`processAction` later rewrites the rows to the real actionId via
+`TransactionService.repointLabelsToActionId`.
+Pre-cutover: delegates to `insertTxLabelMap` with no FK bypass needed.
+StorageKnex overrides this to temporarily disable FK checks on SQLite
+when `transactions_legacy` is present (indicating post-cutover).
+```ts
+async insertLegacyTxLabelMap(labelMap: TableTxLabelMap, trx?: TrxToken): Promise<void>
+```
+See also: [TableTxLabelMap](./storage.md#interface-tabletxlabelmap), [TrxToken](./client.md#interface-trxtoken)
+###### Method markOutputAsSpentBy
+Mark an output as spent by a (potentially legacy) transaction.
+Post-cutover on SQLite: setting `outputs.spentBy = legacyTransactionId`
+violates the FK `outputs.spentBy → transactions.transactionId` because
+unsigned transactions created by `createAction` live in `transactions_legacy`.
+This method disables the FK constraint for the duration of the update.
+The constraint will be satisfied once `processAction` creates the new schema row and
+the bridge-period is complete.
+Pre-cutover: delegates to `updateOutput` with no FK bypass.
+StorageKnex overrides this to toggle `PRAGMA foreign_keys` around the UPDATE
+when `isPostCutover()` and the dbtype is `SQLite`.
+Mapping §2: bridge-period `outputs.spentBy` temporarily references
+`transactions_legacy.transactionId` during `createAction`; new-schema FK is bypassed.
+```ts
+async markOutputAsSpentBy(outputId: number, update: Partial<TableOutput>, trx?: TrxToken): Promise<void>
+```
+See also: [TableOutput](./storage.md#interface-tableoutput), [TrxToken](./client.md#interface-trxtoken)
+###### Method updateLegacyTransaction
+Update a legacy-shaped transaction row in the appropriate table.
+Post-cutover: updates `transactions_legacy` (where unsigned rows live).
+Pre-cutover: delegates to the standard `updateTransaction`.
+Used by `processAction.commitNewTxToStorage` to write back the final txid
+and status to the legacy row that was created by `createAction`.
+StorageKnex overrides this to route to `transactions_legacy` when the
+table exists (post-cutover), otherwise falls through to `updateTransaction`.
+```ts
+async updateLegacyTransaction(id: number | number[], update: Partial<TableTransaction>, trx?: TrxToken): Promise<number>
+```
+See also: [TableTransaction](./storage.md#interface-tabletransaction), [TrxToken](./client.md#interface-trxtoken)
 ###### Method updateProvenTxReqWithNewProvenTx
 Handles storage changes when a valid MerklePath and mined block header are found for a ProvenTxReq txid.
@@ -4135,7 +5195,7 @@ export abstract class StorageReader implements sdk.WalletStorageSyncReader {
 }
 ```
-See also: [Chain](./client.md#type-chain), [DBType](./storage.md#type-dbtype), [FindCertificateFieldsArgs](./client.md#interface-findcertificatefieldsargs), [FindCertificatesArgs](./client.md#interface-findcertificatesargs), [FindCommissionsArgs](./client.md#interface-findcommissionsargs), [FindForUserSincePagedArgs](./client.md#interface-findforusersincepagedargs), [FindMonitorEventsArgs](./client.md#interface-findmonitoreventsargs), [FindOutputBasketsArgs](./client.md#interface-findoutputbasketsargs), [FindOutputTagsArgs](./client.md#interface-findoutputtagsargs), [FindOutputsArgs](./client.md#interface-findoutputsargs), [FindSyncStatesArgs](./client.md#interface-findsyncstatesargs), [FindTransactionsArgs](./client.md#interface-findtransactionsargs), [FindTxLabelsArgs](./client.md#interface-findtxlabelsargs), [FindUsersArgs](./client.md#interface-findusersargs), [RequestSyncChunkArgs](./client.md#interface-requestsyncchunkargs), [StorageReaderOptions](./storage.md#interface-storagereaderoptions), [SyncChunk](./client.md#interface-syncchunk), [TableCertificateField](./storage.md#interface-tablecertificatefield), [TableCertificateX](./storage.md#interface-tablecertificatex), [TableCommission](./storage.md#interface-tablecommission), [TableMonitorEvent](./storage.md#interface-tablemonitorevent), [TableOutput](./storage.md#interface-tableoutput), [TableOutputBasket](./storage.md#interface-tableoutputbasket), [TableOutputTag](./storage.md#interface-tableoutputtag), [TableOutputTagMap](./storage.md#interface-tableoutputtagmap), [TableProvenTx](./storage.md#interface-tableproventx), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TableSettings](./storage.md#interface-tablesettings), [TableSyncState](./storage.md#interface-tablesyncstate), [TableTransaction](./storage.md#interface-tabletransaction), [TableTxLabel](./storage.md#interface-tabletxlabel), [TableTxLabelMap](./storage.md#interface-tabletxlabelmap), [TableUser](./storage.md#interface-tableuser), [TrxToken](./client.md#interface-trxtoken), [WalletStorageSyncReader](./client.md#interface-walletstoragesyncreader), [getSyncChunk](./storage.md#function-getsyncchunk)
+See also: [Chain](./client.md#type-chain), [DBType](./storage.md#type-dbtype), [FindCertificateFieldsArgs](./client.md#interface-findcertificatefieldsargs), [FindCertificatesArgs](./client.md#interface-findcertificatesargs), [FindCommissionsArgs](./client.md#interface-findcommissionsargs), [FindForUserSincePagedArgs](./client.md#interface-findforusersincepagedargs), [FindMonitorEventsArgs](./client.md#interface-findmonitoreventsargs), [FindOutputBasketsArgs](./client.md#interface-findoutputbasketsargs), [FindOutputTagsArgs](./client.md#interface-findoutputtagsargs), [FindOutputsArgs](./client.md#interface-findoutputsargs), [FindSyncStatesArgs](./client.md#interface-findsyncstatesargs), [FindTransactionsArgs](./client.md#interface-findtransactionsargs), [FindTxLabelsArgs](./client.md#interface-findtxlabelsargs), [FindUsersArgs](./client.md#interface-findusersargs), [RequestSyncChunkArgs](./client.md#interface-requestsyncchunkargs), [StorageReaderOptions](./storage.md#interface-storagereaderoptions), [SyncChunk](./client.md#interface-syncchunk), [TableCertificateField](./storage.md#interface-tablecertificatefield), [TableCertificateX](./storage.md#interface-tablecertificatex), [TableCommission](./storage.md#interface-tablecommission), [TableMonitorEvent](./storage.md#interface-tablemonitorevent), [TableOutput](./storage.md#interface-tableoutput), [TableOutputBasket](./storage.md#interface-tableoutputbasket), [TableOutputTag](./storage.md#interface-tableoutputtag), [TableOutputTagMap](./storage.md#interface-tableoutputtagmap), [TableProvenTx](./storage.md#interface-tableproventx), [TableProvenTxReq](./storage.md#interface-tableproventxreq), [TableSettings](./storage.md#interface-tablesettings), [TableSyncState](./storage.md#interface-tablesyncstate), [TableTransaction](./storage.md#interface-tabletransaction), [TableTxLabel](./storage.md#interface-tabletxlabel), [TableTxLabelMap](./storage.md#interface-tabletxlabelmap), [TableUser](./storage.md#interface-tableuser), [TrxToken](./client.md#interface-trxtoken), [WalletStorageSyncReader](./client.md#interface-walletstoragesyncreader), [getSyncChunk](./storage.md#function-getsyncchunk), [validateDate](./storage.md#function-validatedate)
 ###### Method validateEntityDate
@@ -4266,7 +5326,7 @@ export class StorageServer {
 }
 ```
-See also: [EntityTimeStamp](./client.md#interface-entitytimestamp), [StorageProvider](./storage.md#class-storageprovider), [WalletStorageServerOptions](./storage.md#interface-walletstorageserveroptions)
+See also: [EntityTimeStamp](./client.md#interface-entitytimestamp), [StorageProvider](./storage.md#class-storageprovider), [WalletStorageServerOptions](./storage.md#interface-walletstorageserveroptions), [validateDate](./storage.md#function-validatedate), [validateEntities](./storage.md#function-validateentities), [validateEntity](./storage.md#function-validateentity)
 ###### Method validateEntities
@@ -4306,7 +5366,7 @@ and the `StorageBaseReader` to be protected.
 export class StorageSyncReader implements sdk.WalletStorageSyncReader {
     constructor(public auth: sdk.AuthId, public storage: StorageReader)
     async makeAvailable(): Promise<TableSettings>
-    destroy(): Promise<void>
+    async destroy(): Promise<void>
     async getSyncChunk(args: sdk.RequestSyncChunkArgs): Promise<sdk.SyncChunk>
 }
 ```
@@ -4315,6 +5375,543 @@ See also: [AuthId](./client.md#interface-authid), [RequestSyncChunkArgs](./clien
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Class: TransactionService
+```ts
+export class TransactionService {
+    constructor(private readonly knex: Knex)
+    async findByTxid(txid: string): Promise<TableTransactionNew | undefined>
+    async findById(transactionId: number): Promise<TableTransactionNew | undefined>
+    async create(args: {
+        txid: string;
+        processing?: sdk.ProcessingStatus;
+        rawTx?: number[];
+        inputBeef?: number[];
+        batch?: string;
+        idempotencyKey?: string;
+        isCoinbase?: boolean;
+        now?: Date;
+    }): Promise<TableTransactionNew>
+    async transition(args: {
+        transactionId: number;
+        expectedFrom: sdk.ProcessingStatus;
+        to: sdk.ProcessingStatus;
+        provider?: string;
+        providerStatus?: string;
+        details?: Record<string, unknown>;
+        now?: Date;
+    }): Promise<TableTransactionNew | undefined>
+    async recordProof(args: {
+        transactionId: number;
+        height: number;
+        merklePath: number[];
+        merkleRoot: string;
+        blockHash: string;
+        expectedFrom: sdk.ProcessingStatus;
+        now?: Date;
+    }): Promise<TableTransactionNew | undefined>
+    async findActionForUser(userId: number, transactionId: number): Promise<TableAction | undefined>
+    async createAction(args: {
+        userId: number;
+        transactionId: number;
+        reference: string;
+        description: string;
+        isOutgoing: boolean;
+        satoshisDelta: number;
+        userNosend?: boolean;
+        notifyJson?: string;
+        now?: Date;
+    }): Promise<number>
+    async getChainTip(): Promise<{
+        height: number;
+        blockHash: string;
+    } | undefined>
+    async setChainTip(args: {
+        height: number;
+        blockHash: string;
+        merkleRoot?: string;
+        now?: Date;
+    }): Promise<void>
+    async tryClaimLease(claim: MonitorLeaseClaim, now?: Date): Promise<MonitorLeaseResult>
+    async renewLease(renew: MonitorLeaseRenew, now?: Date): Promise<MonitorLeaseResult>
+    async releaseLease(release: MonitorLeaseRelease): Promise<boolean>
+    async findActionByReference(userId: number, reference: string): Promise<{
+        action: TableAction;
+        transaction: TableTransactionNew;
+    } | undefined>
+    async findActionByUserTxid(userId: number, txid: string): Promise<{
+        action: TableAction;
+        transaction: TableTransactionNew;
+    } | undefined>
+    async findOrCreateActionForTxid(args: {
+        userId: number;
+        txid: string;
+        isOutgoing: boolean;
+        description: string;
+        satoshisDelta: number;
+        reference: string;
+        rawTx?: number[];
+        inputBeef?: number[];
+        processing?: sdk.ProcessingStatus;
+        now?: Date;
+    }): Promise<{
+        action: TableAction;
+        transaction: TableTransactionNew;
+        isNew: boolean;
+    }>
+    async updateActionSatoshisDelta(actionId: number, delta: number, now?: Date): Promise<void>
+    async createWithProof(args: {
+        txid: string;
+        rawTx?: number[];
+        inputBeef?: number[];
+        height: number;
+        merklePath: number[];
+        merkleRoot: string;
+        blockHash: string;
+        isCoinbase?: boolean;
+        now?: Date;
+    }): Promise<TableTransactionNew>
+    async findOrCreateForBroadcast(args: {
+        txid: string;
+        rawTx: number[];
+        inputBeef?: number[];
+        batch?: string;
+        processing?: sdk.ProcessingStatus;
+        now?: Date;
+    }): Promise<{
+        transaction: TableTransactionNew;
+        isNew: boolean;
+    }>
+    async transitionMany(args: {
+        transactionIds: number[];
+        expectedFrom?: sdk.ProcessingStatus;
+        to: sdk.ProcessingStatus;
+        provider?: string;
+        providerStatus?: string;
+        details?: Record<string, unknown>;
+        now?: Date;
+    }): Promise<{
+        updated: number[];
+        skipped: number[];
+    }>
+    async setBatch(transactionIds: number[], batch: string | undefined, now?: Date): Promise<void>
+    async incrementAttempts(transactionId: number, now?: Date): Promise<TableTransactionNew | undefined>
+    async recordBroadcastResult(args: {
+        transactionId: number;
+        txid: string;
+        status: sdk.ProcessingStatus;
+        provider: string;
+        providerStatus?: string;
+        wasBroadcast?: boolean;
+        details?: Record<string, unknown>;
+        now?: Date;
+    }): Promise<TableTransactionNew | undefined>
+    async recordHistoryNote(transactionId: number, note: {
+        what: string;
+        [k: string]: unknown;
+    }, now?: Date): Promise<void>
+    async mergeBeefForTxids(beef: Beef, txids: string[]): Promise<void>
+    async collectReqsAndBeef(txids: string[], extraTxids?: string[]): Promise<{
+        beef: Beef;
+        details: Array<{
+            txid: string;
+            status: "readyToSend" | "alreadySent" | "error" | "unknown";
+            reason?: string;
+        }>;
+    }>
+    async listActionsForUser(args: {
+        userId: number;
+        statusFilter?: sdk.ProcessingStatus[];
+        labelIds?: number[];
+        labelQueryMode?: "all" | "any";
+        createdAtFrom?: Date;
+        createdAtTo?: Date;
+        limit: number;
+        offset: number;
+    }): Promise<{
+        rows: Array<TableAction & {
+            txid: string;
+            processing: sdk.ProcessingStatus;
+            height?: number;
+        }>;
+        total?: number;
+    }>
+    async listOutputsForUser(args: {
+        userId: number;
+        basketId?: number;
+        tagIds?: number[];
+        tagQueryMode?: "all" | "any";
+        processingFilter: sdk.ProcessingStatus[];
+        includeSpent: boolean;
+        limit: number;
+        offset: number;
+        includeLockingScripts?: boolean;
+    }): Promise<{
+        rows: Array<TableOutput & {
+            processing: sdk.ProcessingStatus;
+        }>;
+        total?: number;
+    }>
+    async repointLabelsToActionId(legacyTransactionId: number, actionId: number, now?: Date): Promise<void>
+    async repointOutputsToNewTransactionId(legacyTransactionId: number, newTransactionId: number, now?: Date): Promise<void>
+}
+```
+See also: [MonitorLeaseClaim](./monitor.md#interface-monitorleaseclaim), [MonitorLeaseRelease](./monitor.md#interface-monitorleaserelease), [MonitorLeaseRenew](./monitor.md#interface-monitorleaserenew), [MonitorLeaseResult](./monitor.md#interface-monitorleaseresult), [ProcessingStatus](./client.md#type-processingstatus), [TableAction](./storage.md#interface-tableaction), [TableOutput](./storage.md#interface-tableoutput), [TableTransactionNew](./storage.md#interface-tabletransactionnew), [blockHash](./services.md#function-blockhash), [createAction](./storage.md#function-createaction), [getChainTip](./storage.md#function-getchaintip), [releaseLease](./monitor.md#function-releaselease), [renewLease](./monitor.md#function-renewlease), [setChainTip](./storage.md#function-setchaintip), [tryClaimLease](./monitor.md#function-tryclaimlease)
+###### Method collectReqsAndBeef
+#13 — Collect broadcast-readiness info and a populated Beef for a list of
+txids. Each entry is classified as:
+ - `readyToSend`  — queued/sending → still needs broadcast
+ - `alreadySent`  — sent/seen/seen_multi/unconfirmed/confirmed → already on network
+ - `error`        — invalid/doubleSpend → terminal failure
+ - `unknown`      — not found in new-schema
+```ts
+async collectReqsAndBeef(txids: string[], extraTxids?: string[]): Promise<{
+    beef: Beef;
+    details: Array<{
+        txid: string;
+        status: "readyToSend" | "alreadySent" | "error" | "unknown";
+        reason?: string;
+    }>;
+}>
+```
+###### Method create
+Insert a new new transaction row. The row is created in `queued` state
+unless the caller overrides `processing`.
+```ts
+async create(args: {
+    txid: string;
+    processing?: sdk.ProcessingStatus;
+    rawTx?: number[];
+    inputBeef?: number[];
+    batch?: string;
+    idempotencyKey?: string;
+    isCoinbase?: boolean;
+    now?: Date;
+}): Promise<TableTransactionNew>
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus), [TableTransactionNew](./storage.md#interface-tabletransactionnew)
+###### Method createWithProof
+#5 — Create a new transaction row already in `confirmed` state with all proof
+columns populated. Useful for internalised transactions that arrive with a
+Merkle proof (bump) already attached.
+```ts
+async createWithProof(args: {
+    txid: string;
+    rawTx?: number[];
+    inputBeef?: number[];
+    height: number;
+    merklePath: number[];
+    merkleRoot: string;
+    blockHash: string;
+    isCoinbase?: boolean;
+    now?: Date;
+}): Promise<TableTransactionNew>
+```
+See also: [TableTransactionNew](./storage.md#interface-tabletransactionnew), [blockHash](./services.md#function-blockhash)
+###### Method findActionByReference
+#1 — Look up an action + its backing transaction by (userId, reference).
+```ts
+async findActionByReference(userId: number, reference: string): Promise<{
+    action: TableAction;
+    transaction: TableTransactionNew;
+} | undefined>
+```
+See also: [TableAction](./storage.md#interface-tableaction), [TableTransactionNew](./storage.md#interface-tabletransactionnew)
+###### Method findActionByUserTxid
+#2 — Look up an action + its backing transaction by (userId, txid).
+```ts
+async findActionByUserTxid(userId: number, txid: string): Promise<{
+    action: TableAction;
+    transaction: TableTransactionNew;
+} | undefined>
+```
+See also: [TableAction](./storage.md#interface-tableaction), [TableTransactionNew](./storage.md#interface-tabletransactionnew)
+###### Method findOrCreateActionForTxid
+#3 — Upsert: find existing action for (userId, txid) or create both the new
+transaction row and the action row.
+```ts
+async findOrCreateActionForTxid(args: {
+    userId: number;
+    txid: string;
+    isOutgoing: boolean;
+    description: string;
+    satoshisDelta: number;
+    reference: string;
+    rawTx?: number[];
+    inputBeef?: number[];
+    processing?: sdk.ProcessingStatus;
+    now?: Date;
+}): Promise<{
+    action: TableAction;
+    transaction: TableTransactionNew;
+    isNew: boolean;
+}>
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus), [TableAction](./storage.md#interface-tableaction), [TableTransactionNew](./storage.md#interface-tabletransactionnew)
+###### Method findOrCreateForBroadcast
+#6 — Find an existing new transaction row for the given txid (suitable for
+the broadcast queue) or create a new one in `queued` state.
+```ts
+async findOrCreateForBroadcast(args: {
+    txid: string;
+    rawTx: number[];
+    inputBeef?: number[];
+    batch?: string;
+    processing?: sdk.ProcessingStatus;
+    now?: Date;
+}): Promise<{
+    transaction: TableTransactionNew;
+    isNew: boolean;
+}>
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus), [TableTransactionNew](./storage.md#interface-tabletransactionnew)
+###### Method incrementAttempts
+#9 — Atomically increment the `attempts` counter for one transaction and
+write an `attempts.incremented` audit entry.
+```ts
+async incrementAttempts(transactionId: number, now?: Date): Promise<TableTransactionNew | undefined>
+```
+See also: [TableTransactionNew](./storage.md#interface-tabletransactionnew)
+###### Method listActionsForUser
+#14 — Paginated list of actions (per-user transaction views) with optional
+status and label filters.
+After the the schema cutover `tx_labels_map.transactionId` references `actions.actionId`
+(not `transactions.transactionId`).
+```ts
+async listActionsForUser(args: {
+    userId: number;
+    statusFilter?: sdk.ProcessingStatus[];
+    labelIds?: number[];
+    labelQueryMode?: "all" | "any";
+    createdAtFrom?: Date;
+    createdAtTo?: Date;
+    limit: number;
+    offset: number;
+}): Promise<{
+    rows: Array<TableAction & {
+        txid: string;
+        processing: sdk.ProcessingStatus;
+        height?: number;
+    }>;
+    total?: number;
+}>
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus), [TableAction](./storage.md#interface-tableaction)
+###### Method listOutputsForUser
+#15 — Paginated list of outputs with their backing transaction processing
+state. Optional filters: basket, tag set, processing state, spent flag.
+```ts
+async listOutputsForUser(args: {
+    userId: number;
+    basketId?: number;
+    tagIds?: number[];
+    tagQueryMode?: "all" | "any";
+    processingFilter: sdk.ProcessingStatus[];
+    includeSpent: boolean;
+    limit: number;
+    offset: number;
+    includeLockingScripts?: boolean;
+}): Promise<{
+    rows: Array<TableOutput & {
+        processing: sdk.ProcessingStatus;
+    }>;
+    total?: number;
+}>
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus), [TableOutput](./storage.md#interface-tableoutput)
+###### Method mergeBeefForTxids
+#12 — For each txid that exists in the new transactions table, merge the
+raw transaction bytes and (where available) the Merkle path into `beef`.
+Txids not present in new-schema are silently skipped.
+```ts
+async mergeBeefForTxids(beef: Beef, txids: string[]): Promise<void>
+```
+###### Method recordBroadcastResult
+#10 — Record the outcome of a broadcast attempt. Transitions processing
+state, updates `wasBroadcast` and `lastProvider*` columns, and writes an
+audit row.
+```ts
+async recordBroadcastResult(args: {
+    transactionId: number;
+    txid: string;
+    status: sdk.ProcessingStatus;
+    provider: string;
+    providerStatus?: string;
+    wasBroadcast?: boolean;
+    details?: Record<string, unknown>;
+    now?: Date;
+}): Promise<TableTransactionNew | undefined>
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus), [TableTransactionNew](./storage.md#interface-tabletransactionnew)
+###### Method recordHistoryNote
+#11 — Append a free-form history note to the audit log for a transaction.
+```ts
+async recordHistoryNote(transactionId: number, note: {
+    what: string;
+    [k: string]: unknown;
+}, now?: Date): Promise<void>
+```
+###### Method recordProof
+Record acquisition of a Merkle proof for a transaction. Atomically:
+ - Updates proof columns (height, index, merkle_path, merkle_root, block_hash)
+ - Transitions processing to `confirmed` from any spendable-class state.
+ - Writes a `proof.acquired` audit row.
+The merkle leaf index is derived from `merklePath` (BUMP) using the row's
+`txid`; callers do not pass it.
+```ts
+async recordProof(args: {
+    transactionId: number;
+    height: number;
+    merklePath: number[];
+    merkleRoot: string;
+    blockHash: string;
+    expectedFrom: sdk.ProcessingStatus;
+    now?: Date;
+}): Promise<TableTransactionNew | undefined>
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus), [TableTransactionNew](./storage.md#interface-tabletransactionnew), [blockHash](./services.md#function-blockhash)
+###### Method repointLabelsToActionId
+Post-cutover helper: rewrite `tx_labels_map.transactionId` rows that were
+written with the legacy transactionId (before the real txid + actionId were
+known) so that they now point at the new-schema `actions.actionId`.
+Call this once per new outgoing transaction immediately after
+`findOrCreateActionForTxid` resolves the actionId.
+This is a no-op when:
+ - `legacyTransactionId` has no rows in `tx_labels_map` (no labels on the tx)
+ - `legacyTransactionId === actionId` (should not happen in practice but
+   is safe to call anyway)
+```ts
+async repointLabelsToActionId(legacyTransactionId: number, actionId: number, now?: Date): Promise<void>
+```
+###### Method repointOutputsToNewTransactionId
+After `processAction` creates the new `transactions` row, remap
+`outputs.transactionId` and `outputs.spentBy` from the bridge-period
+`transactions_legacy.transactionId` to the real `transactions.transactionId`.
+During `createAction`, new outputs are inserted with `transactionId =
+legacyTransactionId` (bypassing FK constraints). `listActionsKnex` queries
+outputs by new transactionId, so without this remap the outputs would be
+invisible to `listActions`.
+This is a no-op when `legacyTransactionId === newTransactionId`.
+```ts
+async repointOutputsToNewTransactionId(legacyTransactionId: number, newTransactionId: number, now?: Date): Promise<void>
+```
+###### Method setBatch
+#8 — Bulk-set the `batch` column for a list of transaction ids.
+Pass `undefined` to clear the batch tag.
+```ts
+async setBatch(transactionIds: number[], batch: string | undefined, now?: Date): Promise<void>
+```
+###### Method transition
+Transition processing state with optimistic concurrency. Returns
+`undefined` when the FSM rejects the move OR the row's current state no
+longer matches `expectedFrom`.
+```ts
+async transition(args: {
+    transactionId: number;
+    expectedFrom: sdk.ProcessingStatus;
+    to: sdk.ProcessingStatus;
+    provider?: string;
+    providerStatus?: string;
+    details?: Record<string, unknown>;
+    now?: Date;
+}): Promise<TableTransactionNew | undefined>
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus), [TableTransactionNew](./storage.md#interface-tabletransactionnew)
+###### Method transitionMany
+#7 — Bulk transition: attempt `transition` for each id; collect results.
+When `expectedFrom` is omitted the current state of each row is used as
+the expected source (lenient mode — only the FSM is checked).
+```ts
+async transitionMany(args: {
+    transactionIds: number[];
+    expectedFrom?: sdk.ProcessingStatus;
+    to: sdk.ProcessingStatus;
+    provider?: string;
+    providerStatus?: string;
+    details?: Record<string, unknown>;
+    now?: Date;
+}): Promise<{
+    updated: number[];
+    skipped: number[];
+}>
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus)
+###### Method updateActionSatoshisDelta
+#4 — Atomically update the satoshisDelta column on an action row.
+```ts
+async updateActionSatoshisDelta(actionId: number, delta: number, now?: Date): Promise<void>
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Class: WalletStorageManager
@@ -4335,7 +5932,7 @@ for these services.
 ```ts
 export class WalletStorageManager implements sdk.WalletStorage {
     _stores: ManagedStorage[] = [];
-    _isAvailable: boolean = false;
+    _isAvailable = false;
     _active?: ManagedStorage;
     _backups?: ManagedStorage[];
     _conflictingActives?: ManagedStorage[];
@@ -4389,12 +5986,12 @@ export class WalletStorageManager implements sdk.WalletStorage {
     async reproveHeader(deactivatedHash: string): Promise<sdk.ReproveHeaderResult>
     async reproveHeightMerkleRoot(height: number, staleMerkleRoot: string): Promise<sdk.ReproveHeaderResult>
     async reproveProven(ptx: TableProvenTx, noUpdate?: boolean): Promise<sdk.ReproveProvenResult>
-    async syncFromReader(identityKey: string, reader: sdk.WalletStorageSyncReader, activeSync?: sdk.WalletStorageSync, log: string = ""): Promise<{
+    async syncFromReader(identityKey: string, reader: sdk.WalletStorageSyncReader, activeSync?: sdk.WalletStorageSync, log = ""): Promise<{
         inserts: number;
         updates: number;
         log: string;
     }>
-    async syncToWriter(auth: sdk.AuthId, writer: sdk.WalletStorageProvider, activeSync?: sdk.WalletStorageSync, log: string = "", progLog?: (s: string) => string): Promise<{
+    async syncToWriter(auth: sdk.AuthId, writer: sdk.WalletStorageProvider, activeSync?: sdk.WalletStorageSync, log = "", progLog?: (s: string) => string): Promise<{
         inserts: number;
         updates: number;
         log: string;
@@ -4464,7 +6061,7 @@ _conflictingActives?: ManagedStorage[]
 True if makeAvailable has been run and access to managed stores (active) is allowed
 ```ts
-_isAvailable: boolean = false
+_isAvailable = false
 ```
 ###### Property _services
@@ -4504,36 +6101,16 @@ Returns
 true if the active `WalletStorageProvider` also implements `StorageProvider`
-###### Method makeAvailable
-This async function must be called after construction and before
-any other async function can proceed.
+###### Method reproveHeader
-Runs through `_stores` validating all properties and partitioning across `_active`, `_backups`, `_conflictingActives`.
+For each proven_txs record currently sourcing its transaction merkle proof from the given deactivated header,
+attempt to reprove the transaction against the current chain,
+updating the proven_txs record if a new valid proof is found.
 ```ts
-async makeAvailable(): Promise<TableSettings>
+async reproveHeader(deactivatedHash: string): Promise<sdk.ReproveHeaderResult>
 ```
-See also: [TableSettings](./storage.md#interface-tablesettings)
-Returns
-from the active storage.
-Throws
-WERR_INVALID_PARAMETER if canMakeAvailable returns false.
-###### Method reproveHeader
-For each proven_txs record currently sourcing its transaction merkle proof from the given deactivated header,
-attempt to reprove the transaction against the current chain,
-updating the proven_txs record if a new valid proof is found.
-```ts
-async reproveHeader(deactivatedHash: string): Promise<sdk.ReproveHeaderResult>
-```
-See also: [ReproveHeaderResult](./client.md#interface-reproveheaderresult)
+See also: [ReproveHeaderResult](./client.md#interface-reproveheaderresult)
 Argument Details
@@ -4552,23 +6129,6 @@ async reproveHeightMerkleRoot(height: number, staleMerkleRoot: string): Promise<
 ```
 See also: [ReproveHeaderResult](./client.md#interface-reproveheaderresult)
-###### Method reproveProven
-Attempt to reprove the transaction against the current chain,
-If a new valid proof is found and noUpdate is not true,
-update the proven_txs record with new block and merkle proof data.
-If noUpdate is true, the update to be applied is available in the returned result.
-```ts
-async reproveProven(ptx: TableProvenTx, noUpdate?: boolean): Promise<sdk.ReproveProvenResult>
-```
-See also: [ReproveProvenResult](./client.md#interface-reproveprovenresult), [TableProvenTx](./storage.md#interface-tableproventx)
-Argument Details
-+ **ptx**
-  + proven_txs record to reprove
 ###### Method runAsSync
 ```ts
@@ -4605,23 +6165,57 @@ Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](
 | | | |
 | --- | --- | --- |
-| [attemptToPostReqsToNetwork](#function-attempttopostreqstonetwork) | [listActions](#function-listactions) | [renderAdminPage](#function-renderadminpage) |
-| [createAction](#function-createaction) | [listActionsIdb](#function-listactionsidb) | [reviewStatus](#function-reviewstatus) |
-| [createStorageServiceChargeScript](#function-createstorageservicechargescript) | [listCertificates](#function-listcertificates) | [reviewStatusIdb](#function-reviewstatusidb) |
-| [createSyncMap](#function-createsyncmap) | [listOutputs](#function-listoutputs) | [setDisableDoubleSpendCheckForTest](#function-setdisabledoublespendcheckfortest) |
-| [determineDBType](#function-determinedbtype) | [listOutputsIdb](#function-listoutputsidb) | [shareReqsWithWorld](#function-sharereqswithworld) |
-| [generateChangeSdk](#function-generatechangesdk) | [lockScriptWithKeyOffsetFromPubKey](#function-lockscriptwithkeyoffsetfrompubkey) | [transactionInputSize](#function-transactioninputsize) |
-| [generateChangeSdkMakeStorage](#function-generatechangesdkmakestorage) | [offsetPrivKey](#function-offsetprivkey) | [transactionOutputSize](#function-transactionoutputsize) |
-| [getBeefForTransaction](#function-getbeeffortransaction) | [offsetPubKey](#function-offsetpubkey) | [transactionSize](#function-transactionsize) |
-| [getListOutputsSpecOp](#function-getlistoutputsspecop) | [processAction](#function-processaction) | [validateGenerateChangeSdkParams](#function-validategeneratechangesdkparams) |
-| [getSyncChunk](#function-getsyncchunk) | [purgeData](#function-purgedata) | [validateGenerateChangeSdkResult](#function-validategeneratechangesdkresult) |
-| [internalizeAction](#function-internalizeaction) | [purgeDataIdb](#function-purgedataidb) | [validateStorageFeeModel](#function-validatestoragefeemodel) |
-| [keyOffsetToHashedSecret](#function-keyoffsettohashedsecret) | [redeemServiceCharges](#function-redeemservicecharges) | [varUintSize](#function-varuintsize) |
+| [appendTxAudit](#function-appendtxaudit) | [markStaleInputsAsSpent](#function-markstaleinputsasspent) | [transactionOutputSize](#function-transactionoutputsize) |
+| [attemptToPostReqsToNetwork](#function-attempttopostreqstonetwork) | [matchesCertificateFieldPartial](#function-matchescertificatefieldpartial) | [transactionSize](#function-transactionsize) |
+| [auditProcessingTransition](#function-auditprocessingtransition) | [matchesCertificatePartial](#function-matchescertificatepartial) | [transitionProcessing](#function-transitionprocessing) |
+| [classifyReqStatus](#function-classifyreqstatus) | [matchesCommissionPartial](#function-matchescommissionpartial) | [tryClaimLease](#function-tryclaimlease) |
+| [createAction](#function-createaction) | [matchesMonitorEventPartial](#function-matchesmonitoreventpartial) | [updateReqsFromAggregateResults](#function-updatereqsfromaggregateresults) |
+| [createStorageServiceChargeScript](#function-createstorageservicechargescript) | [matchesOutputBasketPartial](#function-matchesoutputbasketpartial) | [upgradeActions](#function-upgradeactions) |
+| [createSyncMap](#function-createsyncmap) | [matchesOutputPartial](#function-matchesoutputpartial) | [upgradeAllStoresV1](#function-upgradeallstoresv1) |
+| [dateMatches](#function-datematches) | [matchesOutputTagMapPartial](#function-matchesoutputtagmappartial) | [upgradeCertificateFields](#function-upgradecertificatefields) |
+| [determineDBType](#function-determinedbtype) | [matchesOutputTagPartial](#function-matchesoutputtagpartial) | [upgradeCertificates](#function-upgradecertificates) |
+| [findAction](#function-findaction) | [matchesProvenTxPartial](#function-matchesproventxpartial) | [upgradeChainTip](#function-upgradechaintip) |
+| [findTransactionNew](#function-findtransactionnew) | [matchesProvenTxReqPartial](#function-matchesproventxreqpartial) | [upgradeCommissions](#function-upgradecommissions) |
+| [findTransactionNewByTxid](#function-findtransactionnewbytxid) | [matchesSyncStatePartial](#function-matchessyncstatepartial) | [upgradeMonitorEvents](#function-upgrademonitorevents) |
+| [generateChangeSdk](#function-generatechangesdk) | [matchesTransactionPartial](#function-matchestransactionpartial) | [upgradeMonitorLease](#function-upgrademonitorlease) |
+| [generateChangeSdkMakeStorage](#function-generatechangesdkmakestorage) | [matchesTxLabelMapPartial](#function-matchestxlabelmappartial) | [upgradeOutputBaskets](#function-upgradeoutputbaskets) |
+| [getBeefForTransaction](#function-getbeeffortransaction) | [matchesTxLabelPartial](#function-matchestxlabelpartial) | [upgradeOutputTags](#function-upgradeoutputtags) |
+| [getChainTip](#function-getchaintip) | [mergeInputBeefs](#function-mergeinputbeefs) | [upgradeOutputTagsMap](#function-upgradeoutputtagsmap) |
+| [getListOutputsSpecOp](#function-getlistoutputsspecop) | [mergeInputsIntoBeef](#function-mergeinputsintobeef) | [upgradeOutputs](#function-upgradeoutputs) |
+| [getSyncChunk](#function-getsyncchunk) | [notifyTransactionsOfProof](#function-notifytransactionsofproof) | [upgradeProvenTxReqs](#function-upgradeproventxreqs) |
+| [indexFromMerklePath](#function-indexfrommerklepath) | [offsetPrivKey](#function-offsetprivkey) | [upgradeProvenTxs](#function-upgradeproventxs) |
+| [insertAction](#function-insertaction) | [offsetPubKey](#function-offsetpubkey) | [upgradeSyncStates](#function-upgradesyncstates) |
+| [insertTransactionNew](#function-inserttransactionnew) | [partitionActionLabels](#function-partitionactionlabels) | [upgradeTransactions](#function-upgradetransactions) |
+| [internalizeAction](#function-internalizeaction) | [processAction](#function-processaction) | [upgradeTransactionsNew](#function-upgradetransactionsnew) |
+| [isProcessingSpendable](#function-isprocessingspendable) | [processingTransitionMap](#function-processingtransitionmap) | [upgradeTxAudit](#function-upgradetxaudit) |
+| [isProcessingTerminal](#function-isprocessingterminal) | [purgeData](#function-purgedata) | [upgradeTxLabels](#function-upgradetxlabels) |
+| [isValidProcessingTransition](#function-isvalidprocessingtransition) | [purgeDataIdb](#function-purgedataidb) | [upgradeTxLabelsMap](#function-upgradetxlabelsmap) |
+| [keyOffsetToHashedSecret](#function-keyoffsettohashedsecret) | [redeemServiceCharges](#function-redeemservicecharges) | [upgradeUsers](#function-upgradeusers) |
+| [listActions](#function-listactions) | [releaseLease](#function-releaselease) | [validateDate](#function-validatedate) |
+| [listActionsIdb](#function-listactionsidb) | [renderAdminPage](#function-renderadminpage) | [validateEntities](#function-validateentities) |
+| [listAuditForTransaction](#function-listauditfortransaction) | [renewLease](#function-renewlease) | [validateEntity](#function-validateentity) |
+| [listCertificates](#function-listcertificates) | [reviewStatus](#function-reviewstatus) | [validateGenerateChangeSdkParams](#function-validategeneratechangesdkparams) |
+| [listOutputs](#function-listoutputs) | [reviewStatusIdb](#function-reviewstatusidb) | [validateGenerateChangeSdkResult](#function-validategeneratechangesdkresult) |
+| [listOutputsIdb](#function-listoutputsidb) | [setChainTip](#function-setchaintip) | [validateProcessingTransition](#function-validateprocessingtransition) |
+| [lockScriptWithKeyOffsetFromPubKey](#function-lockscriptwithkeyoffsetfrompubkey) | [setDisableDoubleSpendCheckForTest](#function-setdisabledoublespendcheckfortest) | [validateStorageFeeModel](#function-validatestoragefeemodel) |
+| [mapActionRow](#function-mapactionrow) | [shareReqsWithWorld](#function-sharereqswithworld) | [validateSyncChunkEntities](#function-validatesyncchunkentities) |
+| [mapTransactionRow](#function-maptransactionrow) | [transactionInputSize](#function-transactioninputsize) | [varUintSize](#function-varuintsize) |
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
+##### Function: appendTxAudit
+```ts
+export async function appendTxAudit(knex: Knex, ev: AuditEvent, now: Date = new Date()): Promise<number>
+```
+See also: [AuditEvent](./storage.md#interface-auditevent)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
 ##### Function: attemptToPostReqsToNetwork
 Attempt to post one or more `ProvenTxReq` with status 'unsent'
@@ -4635,6 +6229,39 @@ See also: [EntityProvenTxReq](./storage.md#class-entityproventxreq), [PostReqsTo
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: auditProcessingTransition
+Convenience helper for processing transitions. Validates the move first;
+on rejection it still records the attempt with `event = 'processing.rejected'`
+so the audit trail captures impossible transitions for later diagnosis.
+Returns `true` when the transition is legal (audit row written with
+`processing.changed`) and `false` when rejected (audit row written with
+`processing.rejected`).
+```ts
+export async function auditProcessingTransition(knex: Knex, transactionId: number, from: sdk.ProcessingStatus, to: sdk.ProcessingStatus, details?: Record<string, unknown>, now: Date = new Date()): Promise<boolean>
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: classifyReqStatus
+Classify a ProvenTxReq status into beef-sharing lifecycle status.
+Mutates `d` in place.
+```ts
+export function classifyReqStatus(d: GetReqsAndBeefDetail, req: TableProvenTxReq): void
+```
+See also: [GetReqsAndBeefDetail](./storage.md#interface-getreqsandbeefdetail), [TableProvenTxReq](./storage.md#interface-tableproventxreq)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Function: createAction
@@ -4669,6 +6296,15 @@ See also: [SyncMap](./storage.md#interface-syncmap)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: dateMatches
+```ts
+export function dateMatches(a: Date | undefined, b: Date | undefined): boolean
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Function: determineDBType
@@ -4684,6 +6320,45 @@ connected database engine variant
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: findAction
+Find an action row by `(userId, transactionId)`.
+```ts
+export async function findAction(knex: Knex, userId: number, transactionId: number): Promise<TableAction | undefined>
+```
+See also: [TableAction](./storage.md#interface-tableaction)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: findTransactionNew
+Read a single `transactions` (new canonical) row by PK.
+```ts
+export async function findTransactionNew(knex: Knex, transactionId: number): Promise<TableTransactionNew | undefined>
+```
+See also: [TableTransactionNew](./storage.md#interface-tabletransactionnew)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: findTransactionNewByTxid
+Read a single `transactions` (new canonical) row by txid, returning `undefined` if absent.
+```ts
+export async function findTransactionNewByTxid(knex: Knex, txid: string): Promise<TableTransactionNew | undefined>
+```
+See also: [TableTransactionNew](./storage.md#interface-tabletransactionnew)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Function: generateChangeSdk
@@ -4747,6 +6422,19 @@ Argument Details
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: getChainTip
+Get the singleton chain tip row (`id = 1`).
+```ts
+export async function getChainTip(knex: Knex): Promise<TableChainTip | undefined>
+```
+See also: [TableChainTip](./storage.md#interface-tablechaintip)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Function: getListOutputsSpecOp
@@ -4777,6 +6465,57 @@ See also: [RequestSyncChunkArgs](./client.md#interface-requestsyncchunkargs), [S
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: indexFromMerklePath
+High-level service over the new-schema storage primitives.
+Storage methods and the Monitor call into this surface rather than the
+lower-level CRUD/FSM/audit/lease modules so that:
+ - Every processing transition is audited.
+ - Optimistic concurrency is uniformly enforced.
+ - Chain tip + monitor lease access have one canonical entry point.
+Construction takes a Knex handle; instances are stateless and cheap to
+create — typically one per request or per Monitor task tick.
+Extract the merkle leaf index for `txid` from a BUMP-encoded merkle path.
+The BUMP format encodes level 0 leaves with `txid: true` and an `offset`
+equal to the position of the transaction in its block. For a single-tx
+proof exactly one leaf is flagged; for trimmed compound proofs the leaf
+matching `txid` is selected.
+```ts
+export function indexFromMerklePath(merklePath: number[], txid: string): number
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: insertAction
+```ts
+export async function insertAction(knex: Knex, row: Omit<TableAction, "actionId" | "created_at" | "updated_at">, now: Date = new Date()): Promise<number>
+```
+See also: [TableAction](./storage.md#interface-tableaction)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: insertTransactionNew
+Insert a new `transactions` (new canonical) row. Caller supplies the full body.
+```ts
+export async function insertTransactionNew(knex: Knex, row: Omit<TableTransactionNew, "transactionId" | "created_at" | "updated_at">, now: Date = new Date()): Promise<number>
+```
+See also: [TableTransactionNew](./storage.md#interface-tabletransactionnew)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Function: internalizeAction
@@ -4813,6 +6552,49 @@ See also: [AuthId](./client.md#interface-authid), [StorageInternalizeActionResul
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: isProcessingSpendable
+True when the given state implies the transaction has been seen / accepted
+by at least one network provider — the precondition for output spendability
+in §4.
+```ts
+export function isProcessingSpendable(s: sdk.ProcessingStatus): boolean
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: isProcessingTerminal
+True when the state is terminal (no further automatic transitions).
+```ts
+export function isProcessingTerminal(s: sdk.ProcessingStatus): boolean
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: isValidProcessingTransition
+Returns true when `from -> to` is a permitted processing transition.
+Identity transitions (`from === to`) are always allowed — they represent a
+status refresh without state change.
+```ts
+export function isValidProcessingTransition(from: sdk.ProcessingStatus, to: sdk.ProcessingStatus): boolean
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Function: keyOffsetToHashedSecret
@@ -4847,6 +6629,19 @@ See also: [AuthId](./client.md#interface-authid), [StorageIdb](./storage.md#clas
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: listAuditForTransaction
+Read all audit rows for a transaction, oldest first. Useful for tests.
+```ts
+export async function listAuditForTransaction(knex: Knex, transactionId: number): Promise<TableTxAudit[]>
+```
+See also: [TableTxAudit](./storage.md#interface-tabletxaudit)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Function: listCertificates
@@ -4893,67 +6688,108 @@ export function lockScriptWithKeyOffsetFromPubKey(pubKey: string, keyOffset?: st
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: offsetPrivKey
+##### Function: mapActionRow
 ```ts
-export function offsetPrivKey(privKey: string, keyOffset?: string): {
-    offsetPrivKey: string;
-    keyOffset: string;
-}
+export function mapActionRow(row: any): TableAction
 ```
+See also: [TableAction](./storage.md#interface-tableaction)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: offsetPubKey
+##### Function: mapTransactionRow
 ```ts
-export function offsetPubKey(pubKey: string, keyOffset?: string): {
-    offsetPubKey: string;
-    keyOffset: string;
-}
+export function mapTransactionRow(row: any): TableTransactionNew
 ```
+See also: [TableTransactionNew](./storage.md#interface-tabletransactionnew)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: processAction
+##### Function: markStaleInputsAsSpent
+After any failed broadcast (doubleSpend, invalidTx, etc.), query each
+consumed-input outpoint of the failed transaction against on-chain
+UTXO state. For inputs the chain authoritatively confirms are spent
+(i.e. NOT a UTXO), update the corresponding wallet basket entry to
+spendable=false.
+Background: `updateTransactionStatus(failed)` optimistically restores
+all consumed-input outputs to spendable=true so the user can retry
+with the same inputs. For some failures (genuine doubleSpend, or any
+'missing-inputs' outcome where the input has been spent on chain by
+a different transaction), restoration is incorrect — the input is
+gone and restoring it produces an infinite missing-inputs loop on
+the next createAction → broadcast cycle. Apps cannot evict from the
+default basket on app-isolated wallets (admin-only policy), so this
+self-heal must run inside the wallet.
+Different broadcasters classify the same on-chain reality differently
+(ARC → doubleSpend, WhatsOnChain/Bitails → invalidTx via
+'missing-inputs'); this helper is broadcaster-agnostic because its
+decision is based on services.isUtxo, not the aggregate failure
+classification.
+Pre-broadcast races where concurrent createActions reach the same
+UTXO across separate app processes are out of scope; see PR
+description.
+Conservatively scoped:
+  - Only inputs found in the failing user's basket are touched.
+  - Inputs whose on-chain UTXO status cannot be determined (service
+    error / inconclusive) are left spendable=true. Eviction is opt-in
+    based on positive evidence of stale state.
+  - Inputs the chain confirms are still UTXOs (e.g. a competing tx
+    itself failed, or a malformed/fee failure where inputs are intact)
+    are left spendable=true — preserving the existing transient-retry
+    semantics callers depend on.
+Returns counts for instrumentation and the set of stale outpoints
+that were actually evicted (added to history note for diagnostics).
 ```ts
-export async function processAction(storage: StorageProvider, auth: AuthId, args: StorageProcessActionArgs): Promise<StorageProcessActionResults>
+export async function markStaleInputsAsSpent(ar: AggregatePostBeefTxResult, storage: StorageProvider, services: sdk.WalletServices, trx?: sdk.TrxToken, logger?: WalletLoggerInterface): Promise<{
+    checked: number;
+    staleConfirmed: number;
+    staleOutpoints: string[];
+}>
 ```
-See also: [AuthId](./client.md#interface-authid), [StorageProcessActionArgs](./client.md#interface-storageprocessactionargs), [StorageProcessActionResults](./client.md#interface-storageprocessactionresults), [StorageProvider](./storage.md#class-storageprovider)
+See also: [AggregatePostBeefTxResult](./storage.md#interface-aggregatepostbeeftxresult), [StorageProvider](./storage.md#class-storageprovider), [TrxToken](./client.md#interface-trxtoken), [WalletServices](./client.md#interface-walletservices), [logger](./client.md#variable-logger)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: purgeData
+##### Function: matchesCertificateFieldPartial
 ```ts
-export async function purgeData(storage: StorageKnex, params: PurgeParams, trx?: TrxToken): Promise<PurgeResults>
+export function matchesCertificateFieldPartial(r: TableCertificateField, partial: Partial<TableCertificateField>): boolean
 ```
-See also: [PurgeParams](./client.md#interface-purgeparams), [PurgeResults](./client.md#interface-purgeresults), [StorageKnex](./storage.md#class-storageknex), [TrxToken](./client.md#interface-trxtoken)
+See also: [TableCertificateField](./storage.md#interface-tablecertificatefield)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: purgeDataIdb
+##### Function: matchesCertificatePartial
 ```ts
-export async function purgeDataIdb(storage: StorageIdb, params: PurgeParams, trx?: TrxToken): Promise<PurgeResults>
+export function matchesCertificatePartial(r: TableCertificate, partial: Partial<TableCertificate>): boolean
 ```
-See also: [PurgeParams](./client.md#interface-purgeparams), [PurgeResults](./client.md#interface-purgeresults), [StorageIdb](./storage.md#class-storageidb), [TrxToken](./client.md#interface-trxtoken)
+See also: [TableCertificate](./storage.md#interface-tablecertificate)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: redeemServiceCharges
+##### Function: matchesCommissionPartial
 ```ts
-export function redeemServiceCharges(privateKeyWif: string, charges: TableCommission[]): {}[]
+export function matchesCommissionPartial(r: TableCommission, partial: Partial<TableCommission>): boolean
 ```
 See also: [TableCommission](./storage.md#interface-tablecommission)
@@ -4961,147 +6797,809 @@ See also: [TableCommission](./storage.md#interface-tablecommission)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: renderAdminPage
+##### Function: matchesMonitorEventPartial
 ```ts
-export function renderAdminPage(): string
+export function matchesMonitorEventPartial(r: TableMonitorEvent, partial: Partial<TableMonitorEvent>): boolean
 ```
+See also: [TableMonitorEvent](./storage.md#interface-tablemonitorevent)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: reviewStatus
-Looks for unpropagated state:
-1. set transactions to 'failed' if not already failed and provenTxReq with matching txid has status of 'invalid'.
-2. sets outputs to spendable true, spentBy undefined if spentBy is a transaction with status 'failed'.
-3. sets transactions to 'completed' if provenTx with matching txid exists and current provenTxId is null.
+##### Function: matchesOutputBasketPartial
 ```ts
-export async function reviewStatus(storage: StorageKnex, args: {
-    agedLimit: Date;
-    trx?: TrxToken;
-}): Promise<{
-    log: string;
-}>
+export function matchesOutputBasketPartial(r: TableOutputBasket, partial: Partial<TableOutputBasket>): boolean
 ```
-See also: [StorageKnex](./storage.md#class-storageknex), [TrxToken](./client.md#interface-trxtoken)
+See also: [TableOutputBasket](./storage.md#interface-tableoutputbasket)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: reviewStatusIdb
-Looks for unpropagated state:
-1. set transactions to 'failed' if not already failed and provenTxReq with matching txid has status of 'invalid'.
-2. sets transactions to 'completed' if provenTx with matching txid exists and current provenTxId is null.
-3. sets outputs to spendable true, spentBy undefined if spentBy is a transaction with status 'failed'.
+##### Function: matchesOutputPartial
 ```ts
-export async function reviewStatusIdb(storage: StorageIdb, args: {
-    agedLimit: Date;
-    trx?: sdk.TrxToken;
-}): Promise<{
-    log: string;
-}>
+export function matchesOutputPartial(r: TableOutput, partial: Partial<TableOutput>): boolean
 ```
-See also: [StorageIdb](./storage.md#class-storageidb), [TrxToken](./client.md#interface-trxtoken)
+See also: [TableOutput](./storage.md#interface-tableoutput)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: setDisableDoubleSpendCheckForTest
+##### Function: matchesOutputTagMapPartial
 ```ts
-export function setDisableDoubleSpendCheckForTest(v: boolean)
+export function matchesOutputTagMapPartial(r: TableOutputTagMap, partial: Partial<TableOutputTagMap>): boolean
 ```
+See also: [TableOutputTagMap](./storage.md#interface-tableoutputtagmap)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: shareReqsWithWorld
-Verifies that all the txids are known reqs with ready-to-share status.
-Assigns a batch identifier and updates all the provenTxReqs.
-If not isDelayed, triggers an initial attempt to broadcast the batch and returns the results.
+##### Function: matchesOutputTagPartial
 ```ts
-export async function shareReqsWithWorld(storage: StorageProvider, userId: number, txids: string[], isDelayed: boolean, r?: GetReqsAndBeefResult, logger?: WalletLoggerInterface): Promise<{
-    swr: SendWithResult[];
-    ndr: ReviewActionResult[] | undefined;
-}>
+export function matchesOutputTagPartial(r: TableOutputTag, partial: Partial<TableOutputTag>): boolean
 ```
-See also: [GetReqsAndBeefResult](./storage.md#interface-getreqsandbeefresult), [ReviewActionResult](./client.md#interface-reviewactionresult), [StorageProvider](./storage.md#class-storageprovider), [logger](./client.md#variable-logger)
-Argument Details
-+ **r**
-  + Optional. Ignores txids and allows ProvenTxReqs and merged beef to be passed in.
+See also: [TableOutputTag](./storage.md#interface-tableoutputtag)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: transactionInputSize
+##### Function: matchesProvenTxPartial
 ```ts
-export function transactionInputSize(scriptSize: number): number
+export function matchesProvenTxPartial(r: TableProvenTx, partial: Partial<TableProvenTx>): boolean
 ```
-Returns
-serialized byte length a transaction input
-Argument Details
-+ **scriptSize**
-  + byte length of input script
+See also: [TableProvenTx](./storage.md#interface-tableproventx)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: transactionOutputSize
+##### Function: matchesProvenTxReqPartial
 ```ts
-export function transactionOutputSize(scriptSize: number): number
+export function matchesProvenTxReqPartial(r: TableProvenTxReq, partial: Partial<TableProvenTxReq>): boolean
 ```
-Returns
+See also: [TableProvenTxReq](./storage.md#interface-tableproventxreq)
-serialized byte length a transaction output
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
-Argument Details
+---
+##### Function: matchesSyncStatePartial
-+ **scriptSize**
-  + byte length of output script
+```ts
+export function matchesSyncStatePartial(r: TableSyncState, partial: Partial<TableSyncState>): boolean
+```
+See also: [TableSyncState](./storage.md#interface-tablesyncstate)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
-##### Function: transactionSize
+##### Function: matchesTransactionPartial
+```ts
+export function matchesTransactionPartial(r: TableTransaction, partial: Partial<TableTransaction>): boolean
+```
+See also: [TableTransaction](./storage.md#interface-tabletransaction)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: matchesTxLabelMapPartial
+```ts
+export function matchesTxLabelMapPartial(r: TableTxLabelMap, partial: Partial<TableTxLabelMap>): boolean
+```
+See also: [TableTxLabelMap](./storage.md#interface-tabletxlabelmap)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: matchesTxLabelPartial
+```ts
+export function matchesTxLabelPartial(r: TableTxLabel, partial: Partial<TableTxLabel>): boolean
+```
+See also: [TableTxLabel](./storage.md#interface-tabletxlabel)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: mergeInputBeefs
+For each input of `rawTx`, ensure the source txid is represented in `beef`.
+When `requiredLevels` is undefined/0 and `knownTxids` contains the source txid,
+a txid-only stub is merged rather than recursing into storage.
+```ts
+export async function mergeInputBeefs(rawTx: number[], beef: Beef, trustSelf: "known" | undefined, knownTxids: string[] | undefined, trx: TrxToken | undefined, requiredLevels: number | undefined, getValidBeef: (txid: string, beef: Beef, trustSelf: "known" | undefined, knownTxids: string[] | undefined, trx: TrxToken | undefined, requiredLevels: number | undefined) => Promise<unknown>): Promise<void>
+```
+See also: [TrxToken](./client.md#interface-trxtoken)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: mergeInputsIntoBeef
+Convenience wrapper for the external-sharing path where `trustSelf` and
+`requiredLevels` are always absent.
+```ts
+export async function mergeInputsIntoBeef(rawTx: number[], beef: Beef, knownTxids: string[], trx: TrxToken | undefined, getValidBeef: (txid: string, beef: Beef, trustSelf: undefined, knownTxids: string[], trx: TrxToken | undefined) => Promise<unknown>): Promise<void>
+```
+See also: [TrxToken](./client.md#interface-trxtoken)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: notifyTransactionsOfProof
+Notify each transaction that a proof has been found.
+Mutates `req` history notes in place.
+The `addNote` and `flushNotes` callbacks avoid coupling this helper to a
+specific entity type.
+```ts
+export async function notifyTransactionsOfProof(ids: number[], provenTxId: number, addNote: (note: ReqHistoryNote) => void, flushNotes: () => Promise<void>, updateTransaction: (id: number, update: {
+    provenTxId: number;
+    status: "completed";
+}) => Promise<unknown>): Promise<void>
+```
+See also: [ReqHistoryNote](./client.md#interface-reqhistorynote)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: offsetPrivKey
+```ts
+export function offsetPrivKey(privKey: string, keyOffset?: string): {
+    offsetPrivKey: string;
+    keyOffset: string;
+}
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: offsetPubKey
+```ts
+export function offsetPubKey(pubKey: string, keyOffset?: string): {
+    offsetPubKey: string;
+    keyOffset: string;
+}
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: partitionActionLabels
+```ts
+export function partitionActionLabels(ordinaryLabels: string[]): {
+    specOp: ListActionsSpecOp | undefined;
+    specOpLabels: string[];
+    labels: string[];
+}
+```
+See also: [ListActionsSpecOp](./storage.md#interface-listactionsspecop)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: processAction
+```ts
+export async function processAction(storage: StorageProvider, auth: AuthId, args: StorageProcessActionArgs): Promise<StorageProcessActionResults>
+```
+See also: [AuthId](./client.md#interface-authid), [StorageProcessActionArgs](./client.md#interface-storageprocessactionargs), [StorageProcessActionResults](./client.md#interface-storageprocessactionresults), [StorageProvider](./storage.md#class-storageprovider)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: processingTransitionMap
+Snapshot of the transition table for documentation + tests.
+```ts
+export function processingTransitionMap(): Readonly<Record<sdk.ProcessingStatus, readonly sdk.ProcessingStatus[]>>
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: purgeData
+```ts
+export async function purgeData(storage: StorageKnex, params: PurgeParams, trx?: TrxToken): Promise<PurgeResults>
+```
+See also: [PurgeParams](./client.md#interface-purgeparams), [PurgeResults](./client.md#interface-purgeresults), [StorageKnex](./storage.md#class-storageknex), [TrxToken](./client.md#interface-trxtoken)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: purgeDataIdb
+```ts
+export async function purgeDataIdb(storage: StorageIdb, params: PurgeParams, trx?: TrxToken): Promise<PurgeResults>
+```
+See also: [PurgeParams](./client.md#interface-purgeparams), [PurgeResults](./client.md#interface-purgeresults), [StorageIdb](./storage.md#class-storageidb), [TrxToken](./client.md#interface-trxtoken)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: redeemServiceCharges
+```ts
+export function redeemServiceCharges(privateKeyWif: string, charges: TableCommission[]): Array<{}>
+```
+See also: [TableCommission](./storage.md#interface-tablecommission)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: releaseLease
+Release the lease (no-op when not owned by the caller).
+The row is deleted so subsequent claimants do not see an inherited
+`renew_count`.
+```ts
+export async function releaseLease(knex: Knex, release: MonitorLeaseRelease): Promise<boolean>
+```
+See also: [MonitorLeaseRelease](./monitor.md#interface-monitorleaserelease)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: renderAdminPage
+```ts
+export function renderAdminPage(): string
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: renewLease
+Extend the current owner's lease. Fails (returns `acquired: false`) when the
+row does not exist, is owned by someone else, or has already expired.
+```ts
+export async function renewLease(knex: Knex, renew: MonitorLeaseRenew, now: Date = new Date()): Promise<MonitorLeaseResult>
+```
+See also: [MonitorLeaseRenew](./monitor.md#interface-monitorleaserenew), [MonitorLeaseResult](./monitor.md#interface-monitorleaseresult)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: reviewStatus
+Looks for unpropagated state:
+1. set transactions to 'failed' if not already failed and provenTxReq with matching txid has status of 'invalid'.
+2. sets outputs to spendable true, spentBy undefined if spentBy is a transaction with status 'failed'.
+3. sets transactions to 'completed' if provenTx with matching txid exists and current provenTxId is null.
+```ts
+export async function reviewStatus(storage: StorageKnex, args: {
+    agedLimit: Date;
+    trx?: TrxToken;
+}): Promise<{
+    log: string;
+}>
+```
+See also: [StorageKnex](./storage.md#class-storageknex), [TrxToken](./client.md#interface-trxtoken)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: reviewStatusIdb
+Looks for unpropagated state:
+1. set transactions to 'failed' if not already failed and provenTxReq with matching txid has status of 'invalid'.
+2. sets transactions to 'completed' if provenTx with matching txid exists and current provenTxId is null.
+3. sets outputs to spendable true, spentBy undefined if spentBy is a transaction with status 'failed'.
+```ts
+export async function reviewStatusIdb(storage: StorageIdb, args: {
+    agedLimit: Date;
+    trx?: sdk.TrxToken;
+}): Promise<{
+    log: string;
+}>
+```
+See also: [StorageIdb](./storage.md#class-storageidb), [TrxToken](./client.md#interface-trxtoken)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: setChainTip
+Upsert the singleton chain tip. Always uses `id = 1`.
+```ts
+export async function setChainTip(knex: Knex, args: {
+    height: number;
+    blockHash: string;
+    merkleRoot?: string;
+}, now: Date = new Date()): Promise<void>
+```
+See also: [blockHash](./services.md#function-blockhash)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: setDisableDoubleSpendCheckForTest
+```ts
+export function setDisableDoubleSpendCheckForTest(v: boolean)
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: shareReqsWithWorld
+```ts
+export async function shareReqsWithWorld(storage: StorageProvider, userId: number, txids: string[], isDelayed: boolean, r?: GetReqsAndBeefResult, logger?: WalletLoggerInterface): Promise<{
+    swr: SendWithResult[];
+    ndr: ReviewActionResult[] | undefined;
+}>
+```
+See also: [GetReqsAndBeefResult](./storage.md#interface-getreqsandbeefresult), [ReviewActionResult](./client.md#interface-reviewactionresult), [StorageProvider](./storage.md#class-storageprovider), [logger](./client.md#variable-logger)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: transactionInputSize
+```ts
+export function transactionInputSize(scriptSize: number): number
+```
+Returns
+serialized byte length a transaction input
+Argument Details
++ **scriptSize**
+  + byte length of input script
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: transactionOutputSize
+```ts
+export function transactionOutputSize(scriptSize: number): number
+```
+Returns
+serialized byte length a transaction output
+Argument Details
++ **scriptSize**
+  + byte length of output script
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: transactionSize
 Compute the serialized binary transaction size in bytes
 given the number of inputs and outputs,
 and the size of each script.
 ```ts
-export function transactionSize(inputs: number[], outputs: number[]): number
+export function transactionSize(inputs: number[], outputs: number[]): number
+```
+Returns
+total transaction size in bytes
+Argument Details
++ **inputs**
+  + array of input script lengths, in bytes
++ **outputs**
+  + array of output script lengths, in bytes
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: transitionProcessing
+Transition the processing column atomically and append a `tx_audit` row.
+Returns the new `TableTransactionNew` on success and `undefined` when the
+source state did not match the row (CAS failed) or the transition was
+rejected by the FSM.
+Optimistic concurrency: the caller passes the `expectedFromState` they
+read in the same logical operation; the update only fires when the row's
+current `processing` still equals that value.
+```ts
+export async function transitionProcessing(knex: Knex, args: {
+    transactionId: number;
+    expectedFromState: sdk.ProcessingStatus;
+    toState: sdk.ProcessingStatus;
+    details?: Record<string, unknown>;
+    provider?: string;
+    providerStatus?: string;
+}, now: Date = new Date()): Promise<TableTransactionNew | undefined>
+```
+See also: [ProcessingStatus](./client.md#type-processingstatus), [TableTransactionNew](./storage.md#interface-tabletransactionnew)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: tryClaimLease
+Try to claim a lease on `taskName`. Succeeds iff:
+  - no row exists for the task, OR
+  - the existing row has `expiresAt <= now`, OR
+  - the existing row's `ownerId` already equals the requested owner.
+On success the row is upserted with `expiresAt = now + ttlMs` and
+`renewCount = renewCount + 1` (0 for fresh rows).
+```ts
+export async function tryClaimLease(knex: Knex, claim: MonitorLeaseClaim, now: Date = new Date()): Promise<MonitorLeaseResult>
+```
+See also: [MonitorLeaseClaim](./monitor.md#interface-monitorleaseclaim), [MonitorLeaseResult](./monitor.md#interface-monitorleaseresult)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: updateReqsFromAggregateResults
+For each txid in submitted `txids`:
+  Based on its aggregate status, and whether broadcast happening in background (isDelayed) or immediately (!isDelayed),
+  and iff current req.status is not 'unproven' or 'completed':
+    'success':
+      req.status => 'unmined', tx.status => 'unproven'
+    'doubleSpend':
+      req.status => 'doubleSpend', tx.status => 'failed'
+    'invalidTx':
+      req.status => 'invalid', tx.status => 'failed'
+    'serviceError':
+      increment req.attempts
+```ts
+export async function updateReqsFromAggregateResults(txids: string[], r: PostReqsToNetworkResult, apbrs: Record<string, AggregatePostBeefTxResult>, storage: StorageProvider, services?: sdk.WalletServices, trx?: sdk.TrxToken, logger?: WalletLoggerInterface): Promise<void>
+```
+See also: [AggregatePostBeefTxResult](./storage.md#interface-aggregatepostbeeftxresult), [PostReqsToNetworkResult](./storage.md#interface-postreqstonetworkresult), [StorageProvider](./storage.md#class-storageprovider), [TrxToken](./client.md#interface-trxtoken), [WalletServices](./client.md#interface-walletservices), [logger](./client.md#variable-logger)
+Argument Details
++ **services**
+  + if valid, doubleSpend results will be verified (but only if not within a trx. e.g. trx must be undefined)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeActions
+```ts
+export function upgradeActions(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeAllStoresV1
+Upgrade handler for every store that existed at schema version 1.
+```ts
+export function upgradeAllStoresV1(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeCertificateFields
+```ts
+export function upgradeCertificateFields(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeCertificates
+```ts
+export function upgradeCertificates(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeChainTip
+```ts
+export function upgradeChainTip(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeCommissions
+```ts
+export function upgradeCommissions(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeMonitorEvents
+```ts
+export function upgradeMonitorEvents(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeMonitorLease
+```ts
+export function upgradeMonitorLease(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeOutputBaskets
+```ts
+export function upgradeOutputBaskets(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeOutputTags
+```ts
+export function upgradeOutputTags(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeOutputTagsMap
+```ts
+export function upgradeOutputTagsMap(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeOutputs
+```ts
+export function upgradeOutputs(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeProvenTxReqs
+```ts
+export function upgradeProvenTxReqs(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeProvenTxs
+```ts
+export function upgradeProvenTxs(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeSyncStates
+```ts
+export function upgradeSyncStates(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeTransactions
+```ts
+export function upgradeTransactions(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeTransactionsNew
+```ts
+export function upgradeTransactionsNew(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeTxAudit
+```ts
+export function upgradeTxAudit(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeTxLabels
+```ts
+export function upgradeTxLabels(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeTxLabelsMap
+```ts
+export function upgradeTxLabelsMap(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: upgradeUsers
+```ts
+export function upgradeUsers(db: IDBPDatabase<StorageIdbSchema>): void
+```
+See also: [StorageIdbSchema](./storage.md#interface-storageidbschema)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: validateDate
+Shared entity-validation helpers used by both client-side storage remoting
+(StorageClientBase / StorageMobile) and the server-side StorageServer.
+These helpers normalise records returned from remote calls or database queries:
+  - Coerce date strings / timestamps to `Date` objects.
+  - Replace `null` values with `undefined`.
+  - Replace `Uint8Array` / `Buffer` values with plain `number[]` arrays.
+```ts
+export function validateDate(date: Date | string | number): Date
+```
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: validateEntities
+Force uniform behaviour across database engines.
+Use to process all arrays of records with timestamps retrieved from database.
+```ts
+export function validateEntities<T extends EntityTimeStamp>(entities: T[], dateFields?: string[]): T[]
 ```
+See also: [EntityTimeStamp](./client.md#interface-entitytimestamp)
 Returns
-total transaction size in bytes
+input `entities` array with contained values validated.
-Argument Details
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
-+ **inputs**
-  + array of input script lengths, in bytes
-+ **outputs**
-  + array of output script lengths, in bytes
+---
+##### Function: validateEntity
+Force uniform behaviour across database engines.
+Use to process all individual records with timestamps retrieved from database.
+```ts
+export function validateEntity<T extends EntityTimeStamp>(entity: T, dateFields?: string[]): T
+```
+See also: [EntityTimeStamp](./client.md#interface-entitytimestamp)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
@@ -5130,6 +7628,20 @@ See also: [GenerateChangeSdkParams](./storage.md#interface-generatechangesdkpara
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: validateProcessingTransition
+As `isValidProcessingTransition` but returns a structured result with a
+human-readable reason for any rejection. Useful for `tx_audit` payloads.
+```ts
+export function validateProcessingTransition(from: sdk.ProcessingStatus, to: sdk.ProcessingStatus): FsmTransitionResult
+```
+See also: [FsmTransitionResult](./storage.md#interface-fsmtransitionresult), [ProcessingStatus](./client.md#type-processingstatus)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Function: validateStorageFeeModel
@@ -5141,6 +7653,20 @@ See also: [StorageFeeModel](./client.md#interface-storagefeemodel)
 Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
+---
+##### Function: validateSyncChunkEntities
+Validate all entity arrays within a `SyncChunk` received from a remote storage call.
+Normalises timestamps, nulls, and binary fields in-place.
+```ts
+export function validateSyncChunkEntities(r: SyncChunk): SyncChunk
+```
+See also: [SyncChunk](./client.md#interface-syncchunk)
+Links: [API](#api), [Interfaces](#interfaces), [Classes](#classes), [Functions](#functions), [Types](#types), [Variables](#variables)
 ---
 ##### Function: varUintSize
@@ -5150,7 +7676,13 @@ Returns the byte size required to encode number as Bitcoin VarUint
 export function varUintSize(val: number): 1 | 3 | 5 | 9 {
     if (val < 0)
         throw new WERR_INVALID_PARAMETER("varUint", "non-negative");
-    return val <= 252 ? 1 : val <= 65535 ? 3 : val <= 4294967295 ? 5 : 9;
+    if (val <= 252)
+        return 1;
+    if (val <= 65535)
+        return 3;
+    if (val <= 4294967295)
+        return 5;
+    return 9;
 }
 ```
@@ -5234,8 +7766,8 @@ getLabelToSpecOp: () => Record<string, ListActionsSpecOp> = () => {
             name: "noSendActions",
             labelsToIntercept: ["abort"],
             setStatusFilter: () => ["nosend"],
-            postProcess: async (s: StorageProvider, auth: AuthId, vargs: Validation.ValidListActionsArgs, specOpLabels: string[], txs: Partial<TableTransaction>[]): Promise<void> => {
-                if (specOpLabels.indexOf("abort") >= 0) {
+            postProcess: async (s: StorageProvider, auth: AuthId, vargs: Validation.ValidListActionsArgs, specOpLabels: string[], txs: Array<Partial<TableTransaction>>): Promise<void> => {
+                if (specOpLabels.includes("abort")) {
                     for (const tx of txs) {
                         if (tx.status === "nosend") {
                             await s.abortAction(auth, { reference: tx.reference! });
@@ -5249,8 +7781,8 @@ getLabelToSpecOp: () => Record<string, ListActionsSpecOp> = () => {
             name: "failedActions",
             labelsToIntercept: ["unfail"],
             setStatusFilter: () => ["failed"],
-            postProcess: async (s: StorageProvider, auth: AuthId, vargs: Validation.ValidListActionsArgs, specOpLabels: string[], txs: Partial<TableTransaction>[]): Promise<void> => {
-                if (specOpLabels.indexOf("unfail") >= 0) {
+            postProcess: async (s: StorageProvider, auth: AuthId, vargs: Validation.ValidListActionsArgs, specOpLabels: string[], txs: Array<Partial<TableTransaction>>): Promise<void> => {
+                if (specOpLabels.includes("unfail")) {
                     for (const tx of txs) {
                         if (tx.status === "failed") {
                             await s.updateTransaction(tx.transactionId!, { status: "unfail" });