@mdbase-dev/sdk 0.1.0-beta.161 → 0.1.0-beta.163

package/dist/application/worker.js

@@ -15244,13 +15244,13 @@ function applicationDeclaration(input) {
   const kind = data.installationKind ?? (platform === "mobile" ? "mobile" : "app-runtime");
   if (platform === null || kind !== "app-runtime" && kind !== "mobile" || platform === "mobile" && kind !== "mobile" || (platform === "extension" || platform === "native") && kind !== "app-runtime") fail();
   const override = data.storage;
-  if (override !== void 0 && (!override || Array.isArray(override) || typeof override !== "object" || Object.keys(override).some((key3) => !["joinDatabaseName", "setupDatabaseName", "applicationNamespace"].includes(key3)))) fail();
+  if (override !== void 0 && (!override || Array.isArray(override) || typeof override !== "object" || Object.keys(override).some((key3) => !["joinDatabaseName", "setupDatabaseName", "unsyncedDatabaseName", "applicationNamespace"].includes(key3)))) fail();
   const fields3 = override;
   const namespace = fields3?.applicationNamespace ?? id4;
   const databaseOwner = typeof namespace === "string" && namespace !== id4 ? `namespace.${storageNamespaceDigest(JSON.stringify([id4, namespace]))}` : id4;
-  const storage = { joinDatabaseName: fields3?.joinDatabaseName ?? `mdbase.${databaseOwner}.native-collection-join.v1`, setupDatabaseName: fields3?.setupDatabaseName ?? `mdbase.${databaseOwner}.native-model-setup.v1`, applicationNamespace: namespace };
+  const storage = { joinDatabaseName: fields3?.joinDatabaseName ?? `mdbase.${databaseOwner}.native-collection-join.v1`, setupDatabaseName: fields3?.setupDatabaseName ?? `mdbase.${databaseOwner}.native-model-setup.v1`, unsyncedDatabaseName: fields3?.unsyncedDatabaseName ?? `mdbase.${databaseOwner}.unsynced.v1`, applicationNamespace: namespace };
   for (const value2 of Object.values(storage)) if (typeof value2 !== "string" || !value2 || value2.length > 256 || /[\u0000-\u001f\u007f]/.test(value2)) fail();
-  if (storage.joinDatabaseName === storage.setupDatabaseName) fail();
+  if ((/* @__PURE__ */ new Set([storage.joinDatabaseName, storage.setupDatabaseName, storage.unsyncedDatabaseName])).size !== 3) fail();
   const resolved = Object.freeze({ id: id4, name: name2, origin: origin4, environment, installationKind: kind, manifest, storage: Object.freeze(storage) });
   storageOverrides.set(resolved, Object.freeze({ ...fields3 }));
   return resolved;
@@ -15308,12 +15308,12 @@ function appReleaseTrust() {
 // src/application/asset-pins.json
 var asset_pins_default = {
   runtime: {
-    sha256: "c30e2e23c1fbc6642936996b8495133ce66e87caaf49a99050fc38f8a7422667",
-    bytes: 3803805,
-    maxBytes: 3803805,
+    sha256: "4d377128dd7e76241cbbf63d00dd3f232286d8a506908fa240d20c6ac85c69a8",
+    bytes: 3811508,
+    maxBytes: 3811508,
     source: {
       repository: "mdbase-dev/mdbase-connect",
-      commit: "81462447473808e040d3b31d15ede54e987ffa1e"
+      commit: "419d7ddfaade89b3795836674685f99738db9427"
     }
   },
   sqlite: {
@@ -16725,22 +16725,22 @@ function timerConsent(value2, requestId, approved, confirmed2, selected) {
   if (!timerKeys(value2)) return void 0;
   if (![true, false, null].includes(value2.timer_consent) || !Array.isArray(value2.timer_grants) || value2.timer_grants.length > 1e3) throw fail3("response");
   const grants = value2.timer_grants.map((item) => {
-    const row2 = object2(item, "grant_id,collection_id,declaration_digest"), collectionId = id(row2.collection_id);
+    const row3 = object2(item, "grant_id,collection_id,declaration_digest"), collectionId = id(row3.collection_id);
     if (!approved.includes(collectionId)) throw fail3("response");
-    return Object.freeze({ grantId: id(row2.grant_id), collectionId, declarationDigest: text(row2.declaration_digest, /^[0-9a-f]{64}$/) });
+    return Object.freeze({ grantId: id(row3.grant_id), collectionId, declarationDigest: text(row3.declaration_digest, /^[0-9a-f]{64}$/) });
   });
   if (new Set(grants.map((grant) => grant.grantId)).size !== grants.length || new Set(grants.map((grant) => grant.collectionId)).size !== grants.length || (value2.timer_consent === true ? !confirmed2 || !selected || !grants.some((grant) => grant.collectionId === selected) : grants.length !== 0) || new Set(grants.map((grant) => grant.declarationDigest)).size > 1) throw fail3("response");
   return value2.timer_consent === null ? void 0 : Object.freeze({ requestId, approved: value2.timer_consent === true, grants: Object.freeze(grants.filter((grant) => grant.collectionId === selected)) });
 }
 function timerChannel(value2) {
-  const row2 = object2(value2, "grantId,kind,targetDigest,channelId,pending");
-  if (!["web_push", "fcm"].includes(row2.kind) || ![null, "register", "delete"].includes(row2.pending) || row2.channelId === null && row2.pending !== "register") throw fail3("response");
+  const row3 = object2(value2, "grantId,kind,targetDigest,channelId,pending");
+  if (!["web_push", "fcm"].includes(row3.kind) || ![null, "register", "delete"].includes(row3.pending) || row3.channelId === null && row3.pending !== "register") throw fail3("response");
   return Object.freeze({
-    grantId: id(row2.grantId),
-    kind: row2.kind,
-    targetDigest: text(row2.targetDigest, /^[0-9a-f]{64}$/),
-    channelId: row2.channelId === null ? null : id(row2.channelId),
-    pending: row2.pending
+    grantId: id(row3.grantId),
+    kind: row3.kind,
+    targetDigest: text(row3.targetDigest, /^[0-9a-f]{64}$/),
+    channelId: row3.channelId === null ? null : id(row3.channelId),
+    pending: row3.pending
   });
 }
 function collectionListing(value2) {
@@ -16891,8 +16891,8 @@ var AppProtectedInstallationSignIn = class _AppProtectedInstallationSignIn {
       id(receipt3.requestId);
       if (!s.token || !s.selection || typeof receipt3.approved !== "boolean" || !Array.isArray(receipt3.grants) || receipt3.grants.length > 1) throw fail3("recovery_required");
       const grants = receipt3.grants.map((grant) => {
-        const row2 = object2(grant, "grantId,collectionId,declarationDigest");
-        return { grant_id: row2.grantId, collection_id: row2.collectionId, declaration_digest: row2.declarationDigest };
+        const row3 = object2(grant, "grantId,collectionId,declarationDigest");
+        return { grant_id: row3.grantId, collection_id: row3.collectionId, declaration_digest: row3.declarationDigest };
       });
       const confirmed2 = s.selection.portalConfirmed === true || s.consentRequest?.portalConfirmed === true;
       s.timerConsent = timerConsent({ timer_consent: receipt3.approved, timer_grants: grants }, id(receipt3.requestId), s.collectionIds, confirmed2, grants[0]?.collection_id);
@@ -16955,8 +16955,8 @@ var AppProtectedInstallationSignIn = class _AppProtectedInstallationSignIn {
   }
   view() {
     this.check();
-    const s = this.state, identity2 = s.consentRequest?.portalConfirmed ? s.consentRequest : s.selection;
-    return Object.freeze({ requestId: s.requestId, installationId: s.installationId, deviceId: s.deviceId, appId: s.appId, kind: s.kind, verificationUri: `${s.cpOrigin}/pair/${s.requestId}`, state: s.token ? "paired" : s.proof ? "awaiting_approval" : s.confirmed ? "account_confirmed" : s.selection ? "account_selected" : "pending", accountId: s.selection?.accountId ?? null, accountEmail: identity2?.accountEmail ?? null, ...identity2?.accountProvider ? { accountProvider: identity2.accountProvider, accountLogin: identity2.accountLogin } : {}, collectionSelection: s.collectionSelection ? Object.freeze({ ...s.collectionSelection, createdCollectionIds: Object.freeze([...s.collectionSelection.createdCollectionIds]) }) : null, nativeSelection: s.nativeSelection && s.nativeGrants?.some((c) => c.authorization_request_id === s.nativeSelection.authorizationRequestId && c.collection_id === s.nativeSelection.collectionId) ? Object.freeze({ ...s.nativeSelection }) : null, nativeGrants: Object.freeze([...s.nativeGrants ?? []]), ...s.timerConsent ? { timerConsent: s.timerConsent } : {}, collectionIds: Object.freeze([...s.collectionIds]), createCollections: s.createCollections, requestedCreateCollections: s.requestedCreateCollections });
+    const s = this.state, identity3 = s.consentRequest?.portalConfirmed ? s.consentRequest : s.selection;
+    return Object.freeze({ requestId: s.requestId, installationId: s.installationId, deviceId: s.deviceId, appId: s.appId, kind: s.kind, verificationUri: `${s.cpOrigin}/pair/${s.requestId}`, state: s.token ? "paired" : s.proof ? "awaiting_approval" : s.confirmed ? "account_confirmed" : s.selection ? "account_selected" : "pending", accountId: s.selection?.accountId ?? null, accountEmail: identity3?.accountEmail ?? null, ...identity3?.accountProvider ? { accountProvider: identity3.accountProvider, accountLogin: identity3.accountLogin } : {}, collectionSelection: s.collectionSelection ? Object.freeze({ ...s.collectionSelection, createdCollectionIds: Object.freeze([...s.collectionSelection.createdCollectionIds]) }) : null, nativeSelection: s.nativeSelection && s.nativeGrants?.some((c) => c.authorization_request_id === s.nativeSelection.authorizationRequestId && c.collection_id === s.nativeSelection.collectionId) ? Object.freeze({ ...s.nativeSelection }) : null, nativeGrants: Object.freeze([...s.nativeGrants ?? []]), ...s.timerConsent ? { timerConsent: s.timerConsent } : {}, collectionIds: Object.freeze([...s.collectionIds]), createCollections: s.createCollections, requestedCreateCollections: s.requestedCreateCollections });
   }
   /** Persist before exposing changed selection/proof/credential or native ACK. */
   async save(next) {
@@ -16973,12 +16973,12 @@ var AppProtectedInstallationSignIn = class _AppProtectedInstallationSignIn {
       bytes8.fill(0);
     }
   }
-  async exclusive(work) {
+  async exclusive(work2) {
     this.check();
     if (this.busy) throw fail3("busy");
     this.busy = true;
     try {
-      return await work();
+      return await work2();
     } finally {
       this.busy = false;
     }
@@ -17238,9 +17238,9 @@ var AppProtectedInstallationSignIn = class _AppProtectedInstallationSignIn {
   /** A consent window the CP reports closed (denied in the portal, or expired) can
    * never be reopened, and re-consent windows are not renewable. Forget it, so the
    * next explicit consent starts a new window instead of re-sending the dead one. */
-  async consentWindow(requestId, work) {
+  async consentWindow(requestId, work2) {
     try {
-      return await work();
+      return await work2();
     } catch (error4) {
       const code = error4 instanceof AppInstallationSignInError ? error4.server?.code : null;
       if ((code === "installation_pairing_denied" || code === "installation_pairing_expired") && error4 instanceof AppInstallationSignInError && error4.server?.status === 404) {
@@ -17674,8 +17674,8 @@ var AppProtectedInstallationSignIn = class _AppProtectedInstallationSignIn {
     this.check();
     this.receipt();
     if (!this.state.timerConsent?.approved || !this.state.timerConsent.grants.some((grant) => grant.grantId === grantId)) throw fail3("fenced");
-    const row2 = this.state.timerChannel;
-    return row2?.grantId === grantId ? row2 : null;
+    const row3 = this.state.timerChannel;
+    return row3?.grantId === grantId ? row3 : null;
   }
   retainTimerChannel(grantId, value2) {
     return this.exclusive(async () => {
@@ -19071,31 +19071,34 @@ function applicationWorkerBinding(value2) {
   return typeof value2 === "string" && /^[a-zA-Z0-9_-]{16,128}$/.test(value2);
 }
 function applicationWorkerRequest(value2, binding) {
-  const fail18 = () => {
+  const fail19 = () => {
     throw new ApplicationWorkerError("application_worker_binding");
   };
-  if (!Array.isArray(value2) || value2.length !== 5 || value2[0] !== APPLICATION_WORKER_PROTOCOL || value2[1] !== binding || !Number.isInteger(value2[2]) || value2[2] < 0 || value2[2] > APPLICATION_WORKER_MAX_ID || value2[2] === 0 && value2[3] !== "foreground" && value2[3] !== "approvalClosed" || value2[2] !== 0 && value2[3] === "approvalClosed") return fail18();
+  if (!Array.isArray(value2) || value2.length !== 5 || value2[0] !== APPLICATION_WORKER_PROTOCOL || value2[1] !== binding || !Number.isInteger(value2[2]) || value2[2] < 0 || value2[2] > APPLICATION_WORKER_MAX_ID || value2[2] === 0 && value2[3] !== "foreground" && value2[3] !== "approvalClosed" || value2[2] !== 0 && value2[3] === "approvalClosed") return fail19();
   const action = value2[3], payload = value2[4];
-  if (!["start", "authorize", "renewExpiredPairing", "select", "clearSelection", "forget", "refreshCollections", "signOut", "deleteCollection", "requestFileAccess", "pollFileAccess", "foreground", "approvalClosed", "close"].includes(action)) fail18();
+  if (!["start", "authorize", "renewExpiredPairing", "select", "clearSelection", "forget", "refreshCollections", "signOut", "deleteCollection", "requestFileAccess", "pollFileAccess", "openUnsynced", "attachUnsynced", "detachUnsynced", "retireUnsynced", "discardUnsynced", "foreground", "approvalClosed", "close"].includes(action)) fail19();
   const uuid7 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
   if (action === "requestFileAccess") {
-    if (!Array.isArray(payload) || payload.length !== 3 || typeof payload[0] !== "string" || !uuid7.test(payload[0]) || !Array.isArray(payload[1]) || !payload[1].length || payload[1].length > 6 || payload[1].some((a) => typeof a !== "string" || !["list", "read", "add", "replace", "move", "delete"].includes(a)) || typeof payload[2] !== "string" || !payload[2] || payload[2].length > 140) fail18();
+    if (!Array.isArray(payload) || payload.length !== 3 || typeof payload[0] !== "string" || !uuid7.test(payload[0]) || !Array.isArray(payload[1]) || !payload[1].length || payload[1].length > 6 || payload[1].some((a) => typeof a !== "string" || !["list", "read", "add", "replace", "move", "delete"].includes(a)) || typeof payload[2] !== "string" || !payload[2] || payload[2].length > 140) fail19();
     return Object.freeze([value2[0], value2[1], value2[2], action, Object.freeze([payload[0], Object.freeze([...payload[1]]), payload[2]])]);
   }
   if (action === "pollFileAccess") {
-    if (typeof payload !== "string" || !uuid7.test(payload)) fail18();
+    if (typeof payload !== "string" || !uuid7.test(payload)) fail19();
   } else if (action === "select" || action === "forget") {
-    if (typeof payload !== "string" || !payload || payload.length > 256 || /[\u0000-\u001f\u007f]/.test(payload)) fail18();
+    if (typeof payload !== "string" || !payload || payload.length > 256 || /[\u0000-\u001f\u007f]/.test(payload)) fail19();
   } else if (action === "deleteCollection") {
-    if (!Array.isArray(payload) || payload.length !== 2 || typeof payload[0] !== "string" || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(payload[0]) || typeof payload[1] !== "string" || !payload[1] || payload[1].length > 1024) fail18();
+    if (!Array.isArray(payload) || payload.length !== 2 || typeof payload[0] !== "string" || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(payload[0]) || typeof payload[1] !== "string" || !payload[1] || payload[1].length > 1024) fail19();
+    return Object.freeze([value2[0], value2[1], value2[2], action, Object.freeze([payload[0], payload[1]])]);
+  } else if (action === "retireUnsynced") {
+    if (!Array.isArray(payload) || payload.length !== 2 || payload.some((id4) => typeof id4 !== "string" || !uuid7.test(id4)) || payload[0] === payload[1]) fail19();
     return Object.freeze([value2[0], value2[1], value2[2], action, Object.freeze([payload[0], payload[1]])]);
   } else if (action === "authorize") {
-    if (payload !== null && (typeof payload !== "string" || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(payload) || payload === "00000000-0000-0000-0000-000000000000")) fail18();
+    if (payload !== null && (typeof payload !== "string" || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(payload) || payload === "00000000-0000-0000-0000-000000000000")) fail19();
   } else if (action === "foreground") {
-    if (typeof payload !== "boolean") fail18();
+    if (typeof payload !== "boolean") fail19();
   } else if (action === "approvalClosed") {
-    if (payload !== true) fail18();
-  } else if (payload !== null) fail18();
+    if (payload !== true) fail19();
+  } else if (payload !== null) fail19();
   return Object.freeze([...value2]);
 }
 function applicationWorkerProblem(error4) {
@@ -19183,7 +19186,7 @@ function open() {
     request3.onerror = request3.onblocked = () => resolve(null);
   });
 }
-function run(mode, work) {
+function run(mode, work2) {
   return open().then((db) => new Promise((resolve) => {
     if (!db) {
       resolve(null);
@@ -19191,7 +19194,7 @@ function run(mode, work) {
     }
     let result2 = null;
     try {
-      const tx = db.transaction(STORE2, mode), request3 = work(tx.objectStore(STORE2));
+      const tx = db.transaction(STORE2, mode), request3 = work2(tx.objectStore(STORE2));
       if (request3) request3.onsuccess = () => {
         result2 = request3.result ?? null;
       };
@@ -19234,13 +19237,13 @@ async function eraseAppLogTokens(scope) {
     try {
       const tx = db.transaction(STORE2, "readwrite"), cursor = tx.objectStore(STORE2).openCursor();
       cursor.onsuccess = () => {
-        const row2 = cursor.result;
-        if (!row2) return;
-        if (typeof row2.key === "string") {
-          const parts = row2.key.split(" ");
-          if (parts.length === 5 && parts[0] === cpOrigin && parts[2] === connectorId && parts[3] === deviceId) row2.delete();
+        const row3 = cursor.result;
+        if (!row3) return;
+        if (typeof row3.key === "string") {
+          const parts = row3.key.split(" ");
+          if (parts.length === 5 && parts[0] === cpOrigin && parts[2] === connectorId && parts[3] === deviceId) row3.delete();
         }
-        row2.continue();
+        row3.continue();
       };
       tx.oncomplete = () => {
         db.close();
@@ -19904,6 +19907,7 @@ var op = union("op", [
   ],
   [12, "sync_settings", [[1, "inclusion", fileInclusion]]]
 ]);
+var validationLevel = enumOf("level", ["off", "warn", "error"]);
 var submitParams = struct("submit-params", [
   [0, "ops", list(op, { nonEmpty: true }), "req1"],
   [1, "mutationId", uuid2, "opt"],
@@ -19913,7 +19917,8 @@ var submitParams = struct("submit-params", [
   [5, "mutationIds", list(uuid2), "opt1"],
   [6, "dryRun", bool, "opt"],
   [7, "include", include, "opt"],
-  [8, "wait", enumOf("wait-for", ["pending", "confirmed", "published"]), "opt"]
+  [8, "wait", enumOf("wait-for", ["pending", "confirmed", "published"]), "opt"],
+  [9, "validation", validationLevel, "opt"]
 ]);
 var CONFLICT_FORMS = ["missing", "value", "text", "blob", "deleted"];
 var conflictValue = {
@@ -20185,7 +20190,7 @@ var mutation = struct("mutation", [
   [6, "ops", list(op, { nonEmpty: true }), "req1"],
   [7, "onBehalf", uuid2, "opt"],
   [8, "conflictMode", conflictMode, "opt"],
-  [9, "validatedAt", enumOf("level", ["off", "warn", "error"]), "opt"],
+  [9, "validatedAt", validationLevel, "opt"],
   [
     10,
     "room",
@@ -20587,9 +20592,9 @@ function decodeAppBasesResult(bytes8, expectedWindow) {
     return { index, code: text2(i.get(1)), detail: text2(i.get(2)) };
   });
   const rows2 = list2(m2.get(3), ROWS_MAX).map((v) => {
-    const row2 = tuple3(v, 4), cells = list2(row2[3], 64);
+    const row3 = tuple3(v, 4), cells = list2(row3[3], 64);
     if (cells.length !== columns.length) throw bad2("row cell count differs from columns");
-    return { record: uuid2.dec(row2[0]), path: text2(row2[1]), sourceRevision: hash.dec(row2[2]), cells: cells.map((v2) => decodeAppBasesCell(v2)) };
+    return { record: uuid2.dec(row3[0]), path: text2(row3[1]), sourceRevision: hash.dec(row3[2]), cells: cells.map((v2) => decodeAppBasesCell(v2)) };
   });
   const groups = list2(m2.get(4), ROWS_MAX).map((v) => {
     const group = tuple3(v, 2), key3 = decodeAppBasesCell(group[0]);
@@ -22546,7 +22551,7 @@ var RecordsApi = class {
     if (this.watch) return;
     const watch = this.client.watchChanges(void 0, (batch) => {
       for (const [id4, slot] of this.slots)
-        if (slot.leases > 0 && (batch.reset || batch.changes.some((change2) => change2.id === id4)))
+        if (slot.leases > 0 && (batch.reset || batch.changes.some((change3) => change3.id === id4)))
           void slot.session.refresh();
     });
     this.watch = watch;
@@ -23413,8 +23418,8 @@ var WriteLedger = class {
     this.changed();
     return this.persist(() => this.entries.has(id4) ? void 0 : this.store.remove(id4));
   }
-  persist(work) {
-    return this.io = this.io.then(work).catch(() => {
+  persist(work2) {
+    return this.io = this.io.then(work2).catch(() => {
     });
   }
   changed() {
@@ -24655,7 +24660,7 @@ var MdbaseClient = class _MdbaseClient {
       this.restorers = this.restorers.filter((f) => f !== start);
       offLink();
     };
-    const fail18 = (why) => {
+    const fail19 = (why) => {
       if (stopped) return;
       stopped = true;
       epoch++;
@@ -24687,7 +24692,7 @@ var MdbaseClient = class _MdbaseClient {
       try {
         await this.readFence(signal);
       } catch (e) {
-        if (current2()) fail18(schemaToError(e, "changes watch"));
+        if (current2()) fail19(schemaToError(e, "changes watch"));
         return;
       }
       if (!current2()) return;
@@ -24722,13 +24727,13 @@ var MdbaseClient = class _MdbaseClient {
           }
           const charge = 64 + batch.cursor.length * 2 + batch.changes.reduce((n, c) => n + 384 + c.path.length * 2, 0);
           if (early.length >= 16 || weight + charge > 1024 * 1024) {
-            fail18(mdbaseError("unavailable", "change watch startup buffer exceeded"));
+            fail19(mdbaseError("unavailable", "change watch startup buffer exceeded"));
             return;
           }
           weight += charge;
           early.push(batch);
         } catch (e) {
-          fail18(schemaToError(e, "changes push"));
+          fail19(schemaToError(e, "changes push"));
         }
       });
       publish("starting");
@@ -24745,17 +24750,17 @@ var MdbaseClient = class _MdbaseClient {
         publish("active");
         if (current2()) resolveReady();
       } catch (e) {
-        if (current2()) fail18(schemaToError(e, "changes watch"));
+        if (current2()) fail19(schemaToError(e, "changes watch"));
       }
     };
     const offLink = this.onLink((link, why) => {
       if (link === "closed") {
-        if (why) fail18(why);
+        if (why) fail19(why);
         else stop();
       }
     });
     this.onSession(start);
-    void this.ready().then(start).catch((e) => fail18(schemaToError(e, "changes watch")));
+    void this.ready().then(start).catch((e) => fail19(schemaToError(e, "changes watch")));
     const watch = Object.assign(stop, { ready, subscribe: (listener) => {
       if (state !== "closed" && state !== "failed") listeners.add(listener);
       notify(listener);
@@ -24842,6 +24847,7 @@ var MdbaseClient = class _MdbaseClient {
     if (o.dryRun) p.dryRun = true;
     if (o.include) p.include = o.include;
     if (o.wait) p.wait = o.wait;
+    if (o.validation) p.validation = o.validation;
     if (!o.dryRun) {
       this.startLedger();
       await this.writeLedger.begin(p.mutationIds ?? [p.mutationId], ops);
@@ -25835,7 +25841,7 @@ function attachAppTimerReceiver(port, options) {
     const id4 = frame[3], verb = frame[4], args = frame[5], ctrl = new AbortController();
     last = id4;
     let dispatched = false, write = verb !== "list" && verb !== "lookupOperation";
-    const work = Promise.resolve().then(async () => {
+    const work2 = Promise.resolve().then(async () => {
       const timer = setTimeout(() => ctrl.abort(), 1e4);
       let response2, reader;
       const bytes8 = new Uint8Array(MAX2);
@@ -25857,16 +25863,16 @@ function attachAppTimerReceiver(port, options) {
         } else if (verb === "registerChannel" && args.length === 1) {
           if (!options.journal) throw error2("upgrade_required", "native_timer_channel_journal_unavailable");
           const input = args[0];
-          const row2 = record(input, `kind,criteria,${input?.kind === "web_push" ? "subscription" : "token"}`);
-          if (!["web_push", "fcm"].includes(row2.kind) || !Array.isArray(row2.criteria) || !row2.criteria.length || row2.criteria.length > 100) throw error2("invalid_request", "timer_input");
-          row2.criteria.forEach(criterion);
-          if (new Set(row2.criteria).size !== row2.criteria.length) throw error2("invalid_request", "timer_input");
+          const row3 = record(input, `kind,criteria,${input?.kind === "web_push" ? "subscription" : "token"}`);
+          if (!["web_push", "fcm"].includes(row3.kind) || !Array.isArray(row3.criteria) || !row3.criteria.length || row3.criteria.length > 100) throw error2("invalid_request", "timer_input");
+          row3.criteria.forEach(criterion);
+          if (new Set(row3.criteria).size !== row3.criteria.length) throw error2("invalid_request", "timer_input");
           let target2;
-          if (row2.kind === "fcm") {
-            if (typeof row2.token !== "string" || row2.token.length < 16 || row2.token.length > 4096 || /[\s\u0000-\u001f\u007f]/.test(row2.token)) throw error2("invalid_request", "timer_input");
-            target2 = { transport: "fcm", token: row2.token };
+          if (row3.kind === "fcm") {
+            if (typeof row3.token !== "string" || row3.token.length < 16 || row3.token.length > 4096 || /[\s\u0000-\u001f\u007f]/.test(row3.token)) throw error2("invalid_request", "timer_input");
+            target2 = { transport: "fcm", token: row3.token };
           } else {
-            const subscription = record(row2.subscription, "endpoint,expirationTime,keys"), keys2 = record(subscription.keys, "p256dh,auth");
+            const subscription = record(row3.subscription, "endpoint,expirationTime,keys"), keys2 = record(subscription.keys, "p256dh,auth");
             if (typeof subscription.endpoint !== "string" || subscription.endpoint.length > 2048 || typeof keys2.p256dh !== "string" || typeof keys2.auth !== "string" || !/^[A-Za-z0-9_-]{87}$/.test(keys2.p256dh) || !/^[A-Za-z0-9_-]{22}$/.test(keys2.auth)) throw error2("invalid_request", "timer_input");
             let endpoint2;
             try {
@@ -25878,7 +25884,7 @@ function attachAppTimerReceiver(port, options) {
             if (subscription.expirationTime !== null && (!Number.isFinite(subscription.expirationTime) || subscription.expirationTime < 0)) throw error2("invalid_request", "timer_input");
             target2 = { subscription };
           }
-          request3 = { path: channelBase, method: "POST", write: true, body: { installation_id: options.scope.installation, criteria: [...row2.criteria].sort(), ...target2 } };
+          request3 = { path: channelBase, method: "POST", write: true, body: { installation_id: options.scope.installation, criteria: [...row3.criteria].sort(), ...target2 } };
           const bytes9 = new TextEncoder().encode(JSON.stringify(request3.body));
           let digest2;
           try {
@@ -25891,7 +25897,7 @@ function attachAppTimerReceiver(port, options) {
           const previous = options.journal.read();
           previousChannel = previous;
           if (previous?.pending) throw error2("outcome_unknown", "timer_channel_reapproval_required");
-          pending = { grantId: options.grantId, kind: row2.kind, targetDigest: digest2, channelId: previous?.channelId ?? null, pending: "register" };
+          pending = { grantId: options.grantId, kind: row3.kind, targetDigest: digest2, channelId: previous?.channelId ?? null, pending: "register" };
         } else if (verb === "unregisterChannel" && args.length === 1 && ["web_push", "fcm"].includes(args[0])) {
           if (!options.journal) throw error2("upgrade_required", "native_timer_channel_journal_unavailable");
           const previous = options.journal.read();
@@ -25997,7 +26003,7 @@ function attachAppTimerReceiver(port, options) {
         if (slot?.id === id4) slot = null;
       }
     });
-    slot = { id: id4, ctrl, work };
+    slot = { id: id4, ctrl, work: work2 };
   };
   port.addEventListener("message", receive);
   port.start();
@@ -26155,7 +26161,7 @@ function attachAppLocalFacade(runtime2, channel, source, logWork) {
       native.send(frame);
       if (logWork && queuesLogWork(frame)) {
         try {
-          logWork();
+          logWork(frame.get(2));
         } catch {
         }
       }
@@ -28513,11 +28519,11 @@ function packIntent(value2) {
   if (value2.version !== 2) fail12("recovery_required");
   return value2;
 }
-function openDatabase(database, signal, current2) {
+function openDatabase(database2, signal, current2) {
   current2();
   if (!globalThis.indexedDB) fail12("recovery_required");
   return new Promise((resolve, reject) => {
-    const request3 = indexedDB.open(database, 1);
+    const request3 = indexedDB.open(database2, 1);
     let abandoned = false;
     const stop = () => {
       abandoned = true;
@@ -28598,7 +28604,7 @@ var AppCollectionSetupJournal = class {
       fail12("fenced");
     }
   }
-  async exclusive(signal, work) {
+  async exclusive(signal, work2) {
     this.check(signal);
     const previous = this.turn;
     let done;
@@ -28619,7 +28625,7 @@ var AppCollectionSetupJournal = class {
       this.check(signal);
       db = await openDatabase(this.owner.databaseName, signal, () => this.check(signal));
       this.check(signal);
-      const result2 = await work(db);
+      const result2 = await work2(db);
       this.check(signal);
       return result2;
     } finally {
@@ -28942,11 +28948,11 @@ function url(value2) {
   return original;
 }
 function profile(value2) {
-  const row2 = object6(value2);
-  const result2 = { issuer: url(row2.issuer), subject: text4(row2.subject), name: text4(row2.name) };
-  if (row2.account_id !== void 0) {
-    if (typeof row2.account_id !== "string" || !uuid5.test(row2.account_id) || row2.account_id === "00000000-0000-0000-0000-000000000000") throw response();
-    result2.account_id = row2.account_id;
+  const row3 = object6(value2);
+  const result2 = { issuer: url(row3.issuer), subject: text4(row3.subject), name: text4(row3.name) };
+  if (row3.account_id !== void 0) {
+    if (typeof row3.account_id !== "string" || !uuid5.test(row3.account_id) || row3.account_id === "00000000-0000-0000-0000-000000000000") throw response();
+    result2.account_id = row3.account_id;
   }
   return result2;
 }
@@ -28966,14 +28972,14 @@ function memberRows(value2) {
 }
 function collectionPeopleDto(resource2, value2) {
   try {
-    const row2 = object6(value2);
+    const row3 = object6(value2);
     if (resource2 === "identity") {
-      const result2 = profile(row2);
-      if (row2.person_settings_url !== void 0) result2.person_settings_url = url(row2.person_settings_url);
+      const result2 = profile(row3);
+      if (row3.person_settings_url !== void 0) result2.person_settings_url = url(row3.person_settings_url);
       return result2;
     }
     if (resource2 !== "members") throw response();
-    const members = memberRows(row2.members).map((value3) => {
+    const members = memberRows(row3.members).map((value3) => {
       const member = object6(value3), result2 = profile(member), role2 = member.role;
       if (role2 !== "owner" && role2 !== "editor" && role2 !== "viewer") throw response();
       return { ...result2, role: role2 };
@@ -29025,19 +29031,19 @@ function resourceReview(value2) {
   if (!plainObject(value2) || !keys(value2, "configuration,packs,staged") || !Array.isArray(value2.packs) || value2.packs.length > 16 || !Array.isArray(value2.configuration) || value2.configuration.length > 64 || !Array.isArray(value2.staged) || value2.staged.length > 1024) throw fail13("binding");
   const packs = value2.packs.map((pack) => {
     if (!plainObject(pack) || !keys(pack, "id,installedVersion,resources,status,version") || !text5(pack.id, 150) || !text5(pack.version, 128) || !["current", "install", "upgrade", "downgrade", "reconfigure", "conflict"].includes(pack.status) || !(pack.installedVersion === null || text5(pack.installedVersion, 128)) || !Array.isArray(pack.resources) || pack.resources.length > 1024) throw fail13("binding");
-    const resources = pack.resources.map((row2) => {
-      if (!plainObject(row2) || !keys(row2, "action,installed,kind,mode,target", ["currentDigest", "reason"]) || !text5(row2.target) || !text5(row2.kind, 64) || row2.mode !== "managed" && row2.mode !== "seed" || typeof row2.installed !== "boolean" || !["create", "update", "delete", "adopt", "preserve", "conflict"].includes(row2.action) || row2.currentDigest !== void 0 && (typeof row2.currentDigest !== "string" || !digestText.test(row2.currentDigest)) || row2.reason !== void 0 && !text5(row2.reason, 8192)) throw fail13("binding");
-      return Object.freeze({ ...row2 });
+    const resources = pack.resources.map((row3) => {
+      if (!plainObject(row3) || !keys(row3, "action,installed,kind,mode,target", ["currentDigest", "reason"]) || !text5(row3.target) || !text5(row3.kind, 64) || row3.mode !== "managed" && row3.mode !== "seed" || typeof row3.installed !== "boolean" || !["create", "update", "delete", "adopt", "preserve", "conflict"].includes(row3.action) || row3.currentDigest !== void 0 && (typeof row3.currentDigest !== "string" || !digestText.test(row3.currentDigest)) || row3.reason !== void 0 && !text5(row3.reason, 8192)) throw fail13("binding");
+      return Object.freeze({ ...row3 });
     });
     return Object.freeze({ id: pack.id, version: pack.version, status: pack.status, installedVersion: pack.installedVersion, resources: Object.freeze(resources) });
   });
-  const configuration = value2.configuration.map((row2) => {
-    if (!plainObject(row2) || !keys(row2, "action,path,requirement", ["value"]) || !text5(row2.requirement, 256) || !text5(row2.path, 1024) || row2.action !== "add" && row2.action !== "conflict" || !(row2.value === void 0 || row2.value === null || ["string", "number", "boolean"].includes(typeof row2.value))) throw fail13("binding");
-    return Object.freeze({ ...row2 });
+  const configuration = value2.configuration.map((row3) => {
+    if (!plainObject(row3) || !keys(row3, "action,path,requirement", ["value"]) || !text5(row3.requirement, 256) || !text5(row3.path, 1024) || row3.action !== "add" && row3.action !== "conflict" || !(row3.value === void 0 || row3.value === null || ["string", "number", "boolean"].includes(typeof row3.value))) throw fail13("binding");
+    return Object.freeze({ ...row3 });
   });
-  const staged = value2.staged.map((row2) => {
-    if (!plainObject(row2) || !keys(row2, "document,path") || !text5(row2.path) || typeof row2.document !== "string" || row2.document.length > 512 * 1024) throw fail13("binding");
-    return Object.freeze({ path: row2.path, document: row2.document });
+  const staged = value2.staged.map((row3) => {
+    if (!plainObject(row3) || !keys(row3, "document,path") || !text5(row3.path) || typeof row3.document !== "string" || row3.document.length > 512 * 1024) throw fail13("binding");
+    return Object.freeze({ path: row3.path, document: row3.document });
   });
   return Object.freeze({ packs: Object.freeze(packs), configuration: Object.freeze(configuration), staged: Object.freeze(staged) });
 }
@@ -29078,7 +29084,7 @@ var journalAction = (action) => action === "load" || action === "prepare" || act
 function attachAppCollectionControl(port, source, options) {
   options = Object.freeze({ ...options });
   const original = pin2(source);
-  let stopped = false, work = null, closing = null, lastId = 0;
+  let stopped = false, work2 = null, closing = null, lastId = 0;
   const me = {}, turn = options.setupTurn;
   const release = () => {
     if (turn?.owner === me) turn.owner = null;
@@ -29145,7 +29151,7 @@ function attachAppCollectionControl(port, source, options) {
         reply(id4, "result", result2);
         return;
       }
-      if (work) {
+      if (work2) {
         reply(id4, "error", "busy");
         return;
       }
@@ -29237,7 +29243,7 @@ function attachAppCollectionControl(port, source, options) {
         current2();
         reply(id4, "result", result2);
       };
-      const pending = work = Promise.resolve().then(operation).catch((error4) => {
+      const pending = work2 = Promise.resolve().then(operation).catch((error4) => {
         if (stopped || options.signal.aborted) return;
         try {
           const resource2 = peopleResource(action);
@@ -29247,7 +29253,7 @@ function attachAppCollectionControl(port, source, options) {
         }
       });
       void pending.finally(() => {
-        if (work === pending) work = null;
+        if (work2 === pending) work2 = null;
       }).catch(() => {
       });
     } catch {
@@ -29259,7 +29265,7 @@ function attachAppCollectionControl(port, source, options) {
     if (closing) return closing;
     closing = Promise.resolve().then(async () => {
       stop();
-      await work;
+      await work2;
     });
     return closing;
   } };
@@ -29431,6 +29437,37 @@ var AppWasmRuntime = class _AppWasmRuntime extends WasmRuntime {
       c.kemSecretKey?.fill(0);
     }
   }
+  /** One attempt: open this app's unsynced collection, a local-only replica
+   * with no log, no trust pins and no stored keys (`rt_app_open_local`). */
+  openUnsyncedConsuming(c) {
+    let encoded = null;
+    try {
+      if (this.attempted || this.deviceAttempted || !this.sql || this.sql.needsRecovery || typeof this.app.rt_app_open_local !== "function") throw bad6();
+      this.attempted = true;
+      if (!Number.isSafeInteger(c.sqliteVersion) || c.sqliteVersion < 0 || c.sqliteVersion > 4294967295) throw bad6();
+      const opened = c.opened === "fresh" ? 0 : c.opened === "existing" ? 1 : c.opened === "unclean" ? 2 : -1;
+      if (opened < 0) throw bad6();
+      encoded = encodeSecret(/* @__PURE__ */ new Map([
+        [0, 1],
+        [1, uuidToBytes(c.collection)],
+        [2, uuidToBytes(c.replicaId)],
+        [3, uuidToBytes(c.deviceId)],
+        [12, opened],
+        [13, c.sqliteVersion]
+      ]));
+      const error4 = this.guard(() => this.takeOut(this.app.rt_app_open_local(...this.put(encoded))));
+      if (error4.length) throw bad6();
+      this.collection = c.collection;
+      this.deviceId = c.deviceId;
+      this.active = true;
+      this.markOpened();
+    } catch {
+      this.fail();
+      throw bad6();
+    } finally {
+      encoded?.fill(0);
+    }
+  }
   tick() {
     if (this.active && !this.retired) this.guard(() => super.tick());
   }
@@ -29605,10 +29642,10 @@ var AppWasmRuntime = class _AppWasmRuntime extends WasmRuntime {
       const out = this.guard(() => this.takeOut(this.app.rt_app_device_open(...this.put(encoded))));
       if (!out.length || !this.deviceCurrent()) throw bad6();
       const result2 = this.guard(() => {
-        const { m: m2, identity: identity2 } = this.publicResult(out);
+        const { m: m2, identity: identity3 } = this.publicResult(out);
         const wrapped = m2.get(3);
         if (!(wrapped instanceof Uint8Array) || !wrapped.length || wrapped.length > 1024) throw bad6();
-        return { ...identity2, envelope: new Uint8Array(wrapped) };
+        return { ...identity3, envelope: new Uint8Array(wrapped) };
       });
       this.publicIdentity = { signPublicKey: new Uint8Array(result2.signPublicKey), kemPublicKey: new Uint8Array(result2.kemPublicKey), noisePublicKey: new Uint8Array(result2.noisePublicKey) };
       this.noiseEnvelope = new Uint8Array(result2.envelope);
@@ -29852,10 +29889,10 @@ var AppWasmRuntime = class _AppWasmRuntime extends WasmRuntime {
         throw bad6();
       }
       if (!out.length) throw bad6();
-      const { m: m2, identity: identity2 } = this.guard(() => this.publicResult(out));
+      const { m: m2, identity: identity3 } = this.guard(() => this.publicResult(out));
       const signature = m2.get(3);
-      if (!(signature instanceof Uint8Array) || signature.length !== 64 || ["signPublicKey", "kemPublicKey", "noisePublicKey"].some((k) => identity2[k].some((b, i) => b !== this.publicIdentity[k][i]))) throw bad6();
-      return Object.freeze({ ...identity2, signature: new Uint8Array(signature) });
+      if (!(signature instanceof Uint8Array) || signature.length !== 64 || ["signPublicKey", "kemPublicKey", "noisePublicKey"].some((k) => identity3[k].some((b, i) => b !== this.publicIdentity[k][i]))) throw bad6();
+      return Object.freeze({ ...identity3, signature: new Uint8Array(signature) });
     } catch {
       this.retireLog();
       throw bad6();
@@ -30619,16 +30656,16 @@ var AppWebCloudCopyHost = class _AppWebCloudCopyHost {
       );
     }
     const authority = this.authority;
-    const work = (async () => {
+    const work2 = (async () => {
       await authority.accessToken(Object.freeze({ signal }));
       this.checkCollection(signal);
       this.pump = this.native.bindLogTransport(authority.logTransport());
     })();
-    this.logWork = work;
+    this.logWork = work2;
     try {
-      await work;
+      await work2;
     } finally {
-      if (this.logWork === work) this.logWork = null;
+      if (this.logWork === work2) this.logWork = null;
     }
   }
   /** Read-only metadata for this adopted collection. Uses the already pinned
@@ -30832,13 +30869,13 @@ var AppWebCloudCopyHost = class _AppWebCloudCopyHost {
       return this.readWork.then(() => {
         this.checkCollection(signal);
       });
-    const work = this.verifyRead(signal, timeoutMs, cold, options.onProgress);
-    this.readWork = work;
-    void work.finally(() => {
-      if (this.readWork === work) this.readWork = null;
+    const work2 = this.verifyRead(signal, timeoutMs, cold, options.onProgress);
+    this.readWork = work2;
+    void work2.finally(() => {
+      if (this.readWork === work2) this.readWork = null;
     }).catch(() => {
     });
-    return work;
+    return work2;
   }
   async verifyRead(signal, timeoutMs, cold, onProgress) {
     const ctrl = new AbortController(), abort = () => ctrl.abort();
@@ -31155,7 +31192,7 @@ var AppCollectionJoinLedger = class {
       };
     });
   }
-  async change(change2, signal) {
+  async change(change3, signal) {
     this.check(signal);
     if (this.busy) throw fail15("busy");
     this.busy = true;
@@ -31195,13 +31232,13 @@ var AppCollectionJoinLedger = class {
             this.check(signal);
             const previous = request3.result;
             if (previous === void 0) {
-              if (change2 !== "prepare") throw fail15();
+              if (change3 !== "prepare") throw fail15();
               records2.add({ version: 1, ...this.options.scope, phase: "attempted" }, this.key);
               result2 = { outcomeMode: "fresh", phase: "attempted" };
             } else {
               const marker = this.marker(previous);
-              if (change2 === "complete" && marker.phase !== "completed") records2.put({ ...marker, phase: "completed" }, this.key);
-              result2 = { outcomeMode: "existing", phase: change2 === "complete" ? "completed" : marker.phase };
+              if (change3 === "complete" && marker.phase !== "completed") records2.put({ ...marker, phase: "completed" }, this.key);
+              result2 = { outcomeMode: "existing", phase: change3 === "complete" ? "completed" : marker.phase };
             }
           } catch (error4) {
             reason = error4;
@@ -31233,19 +31270,19 @@ var AppCollectionJoinLedger = class {
   async markSynced(options) {
     await this.synced("mark", options.signal);
   }
-  async synced(change2, signal) {
+  async synced(change3, signal) {
     let db = null;
     try {
       db = await this.open(signal);
       this.check(signal);
       const key3 = JSON.stringify([this.options.scope.account, this.options.scope.installation, this.options.scope.collection, "synced"]);
       return await new Promise((resolve) => {
-        const tx = db.transaction(STORE7, change2 === "mark" ? "readwrite" : "readonly");
+        const tx = db.transaction(STORE7, change3 === "mark" ? "readwrite" : "readonly");
         let found = false;
         tx.onabort = tx.onerror = () => resolve(false);
-        tx.oncomplete = () => resolve(change2 === "mark" || found);
+        tx.oncomplete = () => resolve(change3 === "mark" || found);
         const records2 = tx.objectStore(STORE7);
-        if (change2 === "mark") records2.put({ version: 1, synced: true }, key3);
+        if (change3 === "mark") records2.put({ version: 1, synced: true }, key3);
         else {
           const request3 = records2.get(key3);
           request3.onsuccess = () => {
@@ -31332,9 +31369,9 @@ var lower = (id4) => {
   uuidToBytes(id4);
   return id4.toLowerCase();
 };
-function bounded2(work, fallback, ms = SIGN_OUT_ERASE_TIMEOUT_MS) {
+function bounded2(work2, fallback, ms = SIGN_OUT_ERASE_TIMEOUT_MS) {
   let timer;
-  return Promise.race([work.catch(() => fallback), new Promise((resolve) => {
+  return Promise.race([work2.catch(() => fallback), new Promise((resolve) => {
     timer = setTimeout(() => resolve(fallback), ms);
   })]).finally(() => clearTimeout(timer));
 }
@@ -31583,9 +31620,9 @@ var AppWebSignInSession = class {
     }
   }
   /** Background approval read; a sign-in gesture may wait for it (authorize). */
-  poll(work) {
+  poll(work2) {
     if (this.pending) return;
-    void this.operation(work).catch(() => {
+    void this.operation(work2).catch(() => {
     });
     this.polling = this.pending;
   }
@@ -31594,14 +31631,14 @@ var AppWebSignInSession = class {
     this.timer = null;
   }
   /** `contained`: a failure rejects the caller only; the session stays as it was. */
-  operation(work, contained = false) {
+  operation(work2, contained = false) {
     this.check();
     if (this.pending) return Promise.reject(failure("busy"));
     this.foregroundRead = null;
     this.stopPolling();
     const workResult = Promise.resolve().then(() => {
       this.check();
-      return work();
+      return work2();
     });
     const pending = workResult.catch(async (error4) => {
       if (!contained && !this.closing && !this.options.signal.aborted) {
@@ -33745,10 +33782,10 @@ function createAppWebCollectionAdapter(source) {
         if (!current2()) return;
         const wake = foreground && Date.now() >= wakeAt;
         if (wake) wakeAt = Number.POSITIVE_INFINITY;
-        const work = driving = wake ? host.wakeCollectionLog({ signal: life.signal }) : host.driveCollection({ signal: life.signal });
-        void work.then(
+        const work2 = driving = wake ? host.wakeCollectionLog({ signal: life.signal }) : host.driveCollection({ signal: life.signal });
+        void work2.then(
           () => {
-            if (driving === work) driving = null;
+            if (driving === work2) driving = null;
             failures = 0;
             turned = true;
             if (current2()) observe();
@@ -33758,7 +33795,7 @@ function createAppWebCollectionAdapter(source) {
           // A failed turn (offline token mint, transient fence) backs off and
           // retries; it never silently ends remote-change delivery for the session.
           (error4) => {
-            if (driving === work) driving = null;
+            if (driving === work2) driving = null;
             failures++;
             if (current2()) observe();
             turnFailed(error4);
@@ -34284,7 +34321,13 @@ function applicationNativeAssets(declaration, packaged, handoff, fetcher) {
     allowLoopbackHttp: environment.allowLoopbackHttp,
     allowNativeLoopbackHttp: environment.allowNativeLoopbackHttp
   });
-  return Object.freeze({ release, environment, loadRuntime, collection });
+  const unsynced = Object.freeze({
+    databaseName: declaration.storage.unsyncedDatabaseName,
+    setupJournal: Object.freeze({ ...collection.setupJournal, databaseName: `${declaration.storage.unsyncedDatabaseName}.setup` }),
+    sql,
+    loadRuntime
+  });
+  return Object.freeze({ release, environment, loadRuntime, collection, unsynced });
 }
 
 // src/application/worker-session.ts
@@ -34324,7 +34367,464 @@ function applicationWorkerSession(declaration, packaged, host) {
     // account has none to pick); the user still decides in Connect.
     freshRequestedCreateCollections: true
   });
-  return Object.freeze({ session, compiled, collection });
+  const unsynced = Object.freeze({ ...assets.unsynced, locks });
+  return Object.freeze({ session, compiled, collection, unsynced, displayName: binding.name });
+}
+
+// src/app-host/unsynced-collection.ts
+var STORE8 = "unsynced";
+var KEY6 = "current";
+var WORK = "work";
+var RETIRED = "retired.";
+var MOVED = "moved.";
+var UUID7 = /^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/;
+var MAX_TABS = 32;
+var AppUnsyncedCollectionError = class extends Error {
+  constructor(reason) {
+    super(`app unsynced collection: ${reason}`);
+    this.reason = reason;
+    this.name = "AppUnsyncedCollectionError";
+  }
+  reason;
+};
+var fail18 = (reason = "unavailable") => new AppUnsyncedCollectionError(reason);
+function identity2(value2) {
+  if (!value2 || typeof value2 !== "object" || Array.isArray(value2) || Object.keys(value2).sort().join() !== "account,collection,device,installation,replica,version") throw fail18();
+  const row3 = value2;
+  const ids = [row3.account, row3.installation, row3.collection, row3.replica, row3.device];
+  if (row3.version !== 1 || ids.some((id4) => typeof id4 !== "string" || !UUID7.test(id4)) || new Set(ids).size !== ids.length) throw fail18();
+  return Object.freeze({ ...row3 });
+}
+function work(value2) {
+  if (!value2 || typeof value2 !== "object" || Array.isArray(value2) || Object.keys(value2).sort().join() !== "since,version") throw fail18();
+  const row3 = value2;
+  if (row3.version !== 1 || !Number.isSafeInteger(row3.since) || row3.since < 0) throw fail18();
+  return Object.freeze({ version: 1, since: row3.since });
+}
+function retired(value2) {
+  if (!value2 || typeof value2 !== "object" || Array.isArray(value2) || Object.keys(value2).sort().join() !== "account,destination,identity,retiredAt,version") throw fail18();
+  const row3 = value2;
+  if (row3.version !== 1 || [row3.destination, row3.account].some((id4) => typeof id4 !== "string" || !UUID7.test(id4)) || !Number.isSafeInteger(row3.retiredAt) || row3.retiredAt < 0) throw fail18();
+  return Object.freeze({ version: 1, identity: identity2(row3.identity), destination: row3.destination, account: row3.account, retiredAt: row3.retiredAt });
+}
+function database(name2, signal) {
+  signal.throwIfAborted();
+  if (!globalThis.indexedDB) throw fail18();
+  return new Promise((resolve, reject) => {
+    const request3 = indexedDB.open(name2, 1);
+    let abandoned = false;
+    const finish = () => signal.removeEventListener("abort", stop);
+    const stop = () => {
+      abandoned = true;
+      finish();
+      try {
+        request3.transaction?.abort();
+      } catch {
+      }
+      reject(fail18("fenced"));
+    };
+    signal.addEventListener("abort", stop, { once: true });
+    request3.onblocked = request3.onerror = stop;
+    request3.onupgradeneeded = () => {
+      try {
+        if (abandoned || request3.result.objectStoreNames.length) throw fail18();
+        request3.result.createObjectStore(STORE8);
+      } catch {
+        try {
+          request3.transaction?.abort();
+        } catch {
+        }
+      }
+    };
+    request3.onsuccess = () => {
+      finish();
+      if (abandoned || request3.result.objectStoreNames.length !== 1 || !request3.result.objectStoreNames.contains(STORE8)) {
+        request3.result.close();
+        reject(fail18());
+        return;
+      }
+      resolve(request3.result);
+    };
+  });
+}
+async function row2(databaseName, key3, parse2, make, signal) {
+  const db = await database(databaseName, signal);
+  try {
+    return await new Promise((resolve, reject) => {
+      const tx = db.transaction(STORE8, make ? "readwrite" : "readonly", { durability: "strict" });
+      let result2 = null, problem3 = null;
+      tx.onabort = tx.onerror = () => reject(problem3 ?? fail18());
+      tx.oncomplete = () => resolve(result2);
+      const rows2 = tx.objectStore(STORE8), read = rows2.get(key3);
+      read.onsuccess = () => {
+        try {
+          if (read.result !== void 0) {
+            result2 = parse2(read.result);
+            return;
+          }
+          if (!make) return;
+          const made = parse2(make());
+          rows2.add(made, key3);
+          result2 = made;
+        } catch (error4) {
+          problem3 = error4;
+          tx.abort();
+        }
+      };
+    });
+  } finally {
+    db.close();
+  }
+}
+function appUnsyncedIdentity(databaseName, create, signal) {
+  return row2(databaseName, KEY6, identity2, create ? () => ({
+    version: 1,
+    account: crypto.randomUUID(),
+    installation: crypto.randomUUID(),
+    collection: crypto.randomUUID(),
+    replica: crypto.randomUUID(),
+    device: crypto.randomUUID()
+  }) : null, signal);
+}
+async function appUnsyncedWork(databaseName, signal) {
+  if (await exists(databaseName, signal) !== true) return null;
+  return row2(databaseName, WORK, work, null, signal);
+}
+async function exists(databaseName, signal) {
+  const list3 = globalThis.indexedDB?.databases;
+  if (typeof list3 !== "function") return null;
+  const names = await list3.call(globalThis.indexedDB);
+  signal.throwIfAborted();
+  return names.some((entry2) => entry2.name === databaseName);
+}
+async function change2(databaseName, signal, work2) {
+  const db = await database(databaseName, signal);
+  try {
+    return await new Promise((resolve, reject) => {
+      const tx = db.transaction(STORE8, "readwrite", { durability: "strict" });
+      let result2, problem3 = null;
+      tx.onabort = tx.onerror = () => reject(problem3 ?? fail18());
+      tx.oncomplete = () => resolve(result2);
+      work2(tx.objectStore(STORE8), (value2) => {
+        result2 = value2;
+      }, (error4) => {
+        problem3 = error4;
+        tx.abort();
+      });
+    });
+  } finally {
+    db.close();
+  }
+}
+function retireAppUnsynced(databaseName, source, destination, account, signal) {
+  return change2(databaseName, signal, (rows2, done, refuse) => {
+    const read = rows2.get(KEY6);
+    read.onsuccess = () => {
+      try {
+        if (read.result === void 0 || identity2(read.result).collection !== source) {
+          done(false);
+          return;
+        }
+        const value2 = retired({ version: 1, identity: read.result, destination, account, retiredAt: Date.now() });
+        rows2.put(value2, RETIRED + source);
+        rows2.delete(KEY6);
+        rows2.delete(WORK);
+        rows2.delete(MOVED + source);
+        done(true);
+      } catch (error4) {
+        refuse(error4);
+      }
+    };
+  });
+}
+function discardAppUnsynced(databaseName, source, signal) {
+  return change2(databaseName, signal, (rows2, done, refuse) => {
+    const read = rows2.get(KEY6);
+    read.onsuccess = () => {
+      try {
+        if (read.result === void 0) {
+          done(null);
+          return;
+        }
+        const found = identity2(read.result);
+        if (found.collection !== source) {
+          done(null);
+          return;
+        }
+        rows2.delete(KEY6);
+        rows2.delete(WORK);
+        rows2.delete(MOVED + source);
+        done(found);
+      } catch (error4) {
+        refuse(error4);
+      }
+    };
+  });
+}
+async function appUnsyncedRetired(databaseName, signal) {
+  if (await exists(databaseName, signal) === false) return [];
+  return change2(databaseName, signal, (rows2, done, refuse) => {
+    const read = rows2.getAll(IDBKeyRange.bound(RETIRED, RETIRED + "\uFFFF"));
+    read.onsuccess = () => {
+      try {
+        done(Object.freeze(read.result.map(retired)));
+      } catch (error4) {
+        refuse(error4);
+      }
+    };
+  });
+}
+function forgetAppUnsyncedRetired(databaseName, collection, signal) {
+  return change2(databaseName, signal, (rows2, done) => {
+    rows2.delete(RETIRED + collection);
+    done();
+  });
+}
+var APP_UNSYNCED_RECOVERY_MS = 30 * 24 * 60 * 60 * 1e3;
+async function pruneAppUnsyncedRetired(databaseName, drop, signal) {
+  let removed = 0;
+  try {
+    for (const copy2 of await appUnsyncedRetired(databaseName, signal)) {
+      if (!drop(copy2) || !await eraseAppUnsyncedStorage(copy2.identity)) continue;
+      await forgetAppUnsyncedRetired(databaseName, copy2.identity.collection, signal);
+      removed++;
+    }
+  } catch {
+  }
+  return removed;
+}
+async function eraseAppUnsyncedStorage(id4) {
+  const storage = globalThis.navigator?.storage;
+  if (typeof storage?.getDirectory !== "function") return true;
+  try {
+    const root = await storage.getDirectory();
+    await root.removeEntry(appPoolNames({ account: id4.account, installation: id4.installation, collection: id4.collection }).directory, { recursive: true });
+    return true;
+  } catch (error4) {
+    return error4 instanceof DOMException && error4.name === "NotFoundError";
+  }
+}
+async function openAppUnsyncedCollection(options, displayName, parent) {
+  if (typeof options.loadRuntime !== "function" || typeof displayName !== "string" || !displayName.trim()) throw fail18("binding");
+  const openSql = createAppCollectionSql(options.sql);
+  const id4 = await appUnsyncedIdentity(options.databaseName, true, parent);
+  if (!id4) throw fail18();
+  const scope = Object.freeze({ account: id4.account, installation: id4.installation, collection: id4.collection });
+  const life = new AbortController(), signal = AbortSignal.any([parent, life.signal]);
+  let closed = false, closing = null, lease = null;
+  let runtime2 = null, sqlClose = null, fence = null;
+  let journal = null, ledger = null;
+  let assessment = "setup_required";
+  let saved = null, marking = false, writes = 0;
+  let mode = "approved-new";
+  const generation = crypto.randomUUID(), setupTurn = { owner: null };
+  const listeners = /* @__PURE__ */ new Set();
+  const tabs = /* @__PURE__ */ new Map();
+  const current2 = () => !closed && !signal.aborted;
+  const changed = () => {
+    for (const listener of [...listeners]) try {
+      listener();
+    } catch {
+    }
+  };
+  let ticking = false;
+  const tick = () => {
+    if (ticking || !current2()) return;
+    ticking = true;
+    queueMicrotask(() => {
+      ticking = false;
+      try {
+        if (current2()) runtime2?.tick();
+      } catch {
+        void close().catch(() => {
+        });
+      }
+    });
+  };
+  const submitted = (method) => {
+    tick();
+    if (method === "submit") writes++;
+    if (method !== "submit" || saved || marking || !current2()) return;
+    marking = true;
+    void row2(options.databaseName, WORK, work, () => ({ version: 1, since: Date.now() }), signal).then((value2) => {
+      if (value2 && current2()) {
+        saved = value2;
+        changed();
+      }
+    }).catch(() => {
+    }).finally(() => {
+      marking = false;
+    });
+  };
+  const drop = (handoff) => {
+    const tab = tabs.get(handoff.dataPort);
+    if (!tab) return;
+    tabs.delete(handoff.dataPort);
+    try {
+      tab.facade.close();
+    } catch {
+    }
+    void tab.control.close().catch(() => {
+    });
+    for (const port of [tab.data.port1, tab.command.port1]) try {
+      port.close();
+    } catch {
+    }
+  };
+  const close = () => closing ??= (async () => {
+    closed = true;
+    life.abort();
+    changed();
+    let failed = false;
+    for (const tab of [...tabs.values()]) {
+      try {
+        await tab.control.close();
+      } catch {
+        failed = true;
+      }
+      try {
+        tab.facade.close();
+      } catch {
+        failed = true;
+      }
+      try {
+        tab.data.port1.postMessage([1, JSON.stringify([scope.account, scope.installation, scope.collection]), "close"]);
+      } catch {
+        failed = true;
+      }
+      for (const port of [tab.data.port1, tab.data.port2, tab.command.port1, tab.command.port2]) try {
+        port.close();
+      } catch {
+        failed = true;
+      }
+    }
+    tabs.clear();
+    try {
+      journal?.close();
+    } catch {
+      failed = true;
+    }
+    try {
+      const clean2 = await runtime2?.close();
+      if (runtime2 && clean2 !== true) fence?.();
+    } catch {
+      failed = true;
+      fence?.();
+    }
+    try {
+      await sqlClose?.();
+    } catch {
+      failed = true;
+    }
+    try {
+      await lease?.release();
+    } catch {
+      failed = true;
+    }
+    listeners.clear();
+    if (failed) throw fail18();
+  })();
+  try {
+    lease = await acquireAppReplicaLease(options.locks, scope, signal);
+    journal = new AppCollectionSetupJournal({ ...options.setupJournal, scope, isCurrent: current2 });
+    const artifact = await options.loadRuntime({ signal });
+    if (!current2()) throw fail18("fenced");
+    const sql = await openSql({ scope, signal });
+    sqlClose = () => sql.close();
+    fence = () => sql.sql.fence();
+    ledger = sql.ledger ?? null;
+    if (!current2()) throw fail18("fenced");
+    runtime2 = await AppWasmRuntime.create(new Uint8Array(artifact), sql.sql);
+    if (!current2()) throw fail18("fenced");
+    runtime2.openUnsyncedConsuming({ collection: id4.collection, replicaId: id4.replica, deviceId: id4.device, opened: sql.opened, sqliteVersion: sql.sqliteVersion });
+    const intent = await journal.load(signal);
+    if (!current2()) throw fail18("fenced");
+    saved = await row2(options.databaseName, WORK, work, null, signal);
+    if (!current2()) throw fail18("fenced");
+    if (intent && intent.version !== 1 && (intent.phase === "attempted" || intent.phase === "confirmed")) mode = "reconcile-original";
+    const native = runtime2, local = Object.freeze({ ...scope, isCurrent: current2 });
+    const attach = () => {
+      if (!current2() || tabs.size >= MAX_TABS) return null;
+      const data = new MessageChannel(), command = new MessageChannel();
+      let control = null, facade = null;
+      try {
+        facade = attachAppLocalFacade(native, data.port1, local, submitted);
+        let value2 = null;
+        control = attachAppCollectionControl(command.port1, { scope, generation }, {
+          journal,
+          resourceSetup: facade.resourceSetup,
+          signal,
+          isCurrent: current2,
+          ledger: () => current2() ? ledger : null,
+          setupTurn,
+          assess(state) {
+            if (!current2()) return;
+            if (assessment !== state) {
+              assessment = state;
+              changed();
+            }
+          },
+          // Nothing syncs, so visibility changes nothing here.
+          foreground() {
+          },
+          onProtocolFailure() {
+            if (value2) drop(value2);
+          }
+        });
+        value2 = Object.freeze({
+          schema: "mdbn-app-collection/1",
+          scope,
+          generation,
+          displayName,
+          setupMode: mode === "reconcile-original" ? mode : assessment === "ready" ? "inspect" : "approved-new",
+          dataPort: data.port2,
+          controlPort: command.port2,
+          people: true
+        });
+        tabs.set(data.port2, { data, command, facade, control });
+        return value2;
+      } catch {
+        try {
+          facade?.close();
+        } catch {
+        }
+        void control?.close().catch(() => {
+        });
+        for (const port of [data.port1, data.port2, command.port1, command.port2]) port.close();
+        return null;
+      }
+    };
+    return Object.freeze({
+      scope,
+      generation,
+      isCurrent: current2,
+      setForeground() {
+      },
+      attach,
+      detach: drop,
+      close,
+      get state() {
+        return current2() ? assessment : "setup_required";
+      },
+      get work() {
+        return saved;
+      },
+      get writes() {
+        return writes;
+      },
+      subscribe(listener) {
+        if (!current2()) throw fail18("fenced");
+        listeners.add(listener);
+        return () => {
+          listeners.delete(listener);
+        };
+      }
+    });
+  } catch (error4) {
+    await close().catch(() => {
+    });
+    throw error4;
+  }
 }
 
 // src/application/worker-host.ts
@@ -34353,6 +34853,14 @@ var ApplicationWorkerHost = class {
   /** The latest proxy portal's person-closed report (page `approvalClosed`). */
   approval = null;
   unsubscribe = null;
+  /** The app's unsynced collection (work before connecting): open while a tab
+   * shows it, beside the session's collections. Never listed or remembered. */
+  unsyncedOptions;
+  unsyncedName;
+  unsynced = null;
+  unsyncedProblem = null;
+  /** Whether the unsynced collection holds work, shown to every tab. */
+  unsyncedWork = null;
   constructor(port, binding, declaration, packaged, locks, storageNamespace, fetcher) {
     if (!applicationWorkerBinding(binding)) throw new ApplicationWorkerError("application_worker_binding");
     const composed = applicationWorkerSession(declaration, packaged, {
@@ -34364,20 +34872,179 @@ var ApplicationWorkerHost = class {
       ...fetcher ? { fetch: fetcher } : {}
     });
     this.session = composed.session;
+    this.unsyncedOptions = composed.unsynced;
+    this.unsyncedName = composed.displayName;
     this.primary = this.client(port, binding, true);
     this.unsubscribe = this.session.subscribe(() => {
       this.applyForeground();
       if (this.stopping) return;
-      if (this.session.getSnapshot().status === "signed_out") for (const client of this.clients.values()) this.leave(client);
+      if (this.session.getSnapshot().status === "signed_out") {
+        for (const client of this.clients.values()) if (!this.showsUnsynced(client)) this.leave(client);
+      }
       for (const client of [...this.clients.values()]) this.post(client, [APPLICATION_WORKER_PROTOCOL, client.binding, "nativeSnapshot", 0, this.view(client)]);
       this.reconcile();
     });
     this.post(this.primary, [APPLICATION_WORKER_PROTOCOL, binding, "nativeSnapshot", 0, this.view(this.primary)]);
+    const name2 = this.unsyncedOptions?.databaseName;
+    if (name2) {
+      void appUnsyncedWork(name2, this.lifetime.signal).then((found) => {
+        if (found) this.noteUnsyncedWork(found);
+      }).catch(() => {
+      });
+      const now = Date.now();
+      void pruneAppUnsyncedRetired(name2, (copy2) => copy2.retiredAt + APP_UNSYNCED_RECOVERY_MS < now, this.lifetime.signal);
+    }
+  }
+  noteUnsyncedWork(found) {
+    if (this.stopping || this.unsyncedWork?.since === found?.since) return;
+    this.unsyncedWork = found ? Object.freeze({ since: found.since }) : null;
+    for (const client of [...this.clients.values()]) this.post(client, [APPLICATION_WORKER_PROTOCOL, client.binding, "nativeSnapshot", 0, this.view(client)]);
   }
   /** What one tab sees: the shared sign-in with its own collection. A tab that
    * did not start an approval in progress keeps showing its open collection. */
   view(client) {
-    return this.session.viewFor(client.selected, { bystander: this.approval?.client !== client });
+    const bystander = this.approval?.client !== client;
+    const work2 = this.unsyncedWork;
+    if (!this.showsUnsynced(client)) {
+      const view = this.session.viewFor(client.selected, { bystander });
+      return work2 ? Object.freeze({ ...view, unsyncedWork: work2 }) : view;
+    }
+    const base = this.session.viewFor(null, { bystander }), open2 = this.unsynced?.isCurrent() === true;
+    const status = base.status === "authorizing" ? base.status : open2 ? this.unsynced.state : this.unsyncedProblem ? "blocked" : "opening";
+    return Object.freeze({
+      ...base,
+      status,
+      selectedCollectionId: client.selected,
+      problem: status === "blocked" ? this.unsyncedProblem : base.status === "authorizing" ? base.problem : null,
+      openingProgress: null,
+      transport: null,
+      live: null,
+      unsynced: Object.freeze({ collectionId: client.selected, sessionStatus: base.status }),
+      unsyncedWork: work2
+    });
+  }
+  showsUnsynced(client) {
+    return client.selected !== null && client.selected === this.unsynced?.scope.collection;
+  }
+  /** The open collection with this id: the unsynced one or the session's. */
+  connectionOf(id4) {
+    return this.unsynced?.scope.collection === id4 ? this.unsynced : this.session.connection(id4);
+  }
+  /** The unsynced collection, opening it (creating it on first use) if needed. */
+  async ensureUnsynced() {
+    let connection = this.unsynced?.isCurrent() ? this.unsynced : null;
+    if (!connection) {
+      const previous = this.unsynced;
+      this.unsynced = null;
+      await previous?.close().catch(() => {
+      });
+      this.unsyncedProblem = null;
+      try {
+        connection = await openAppUnsyncedCollection(this.unsyncedOptions, this.unsyncedName, this.lifetime.signal);
+      } catch (error4) {
+        this.unsyncedProblem = applicationWorkerReplyProblem(error4).code;
+        throw error4;
+      }
+      if (this.stopping || this.lifetime.signal.aborted) {
+        await connection.close().catch(() => {
+        });
+        throw new ApplicationWorkerError("application_worker_fenced");
+      }
+      this.unsynced = connection;
+      const opened = connection;
+      opened.subscribe(() => {
+        if (this.stopping) return;
+        const found = opened.work;
+        if (found && this.unsyncedWork?.since !== found.since) {
+          this.noteUnsyncedWork(found);
+          return;
+        }
+        for (const other of [...this.clients.values()]) if (this.showsUnsynced(other)) this.post(other, [APPLICATION_WORKER_PROTOCOL, other.binding, "nativeSnapshot", 0, this.view(other)]);
+      });
+    }
+    return connection;
+  }
+  async openUnsynced(client, id4) {
+    const connection = await this.ensureUnsynced();
+    const collection = connection.scope.collection;
+    if (client.selected !== collection) {
+      this.leave(client);
+      client.selected = collection;
+    }
+    if (client.generation === connection.generation) return;
+    const value2 = connection.attach();
+    if (!value2) throw new ApplicationWorkerError("application_worker_unavailable");
+    client.generation = value2.generation;
+    client.handoff = value2;
+    client.collection = collection;
+    this.post(client, [APPLICATION_WORKER_PROTOCOL, client.binding, "handoff", id4, value2], [value2.dataPort, value2.controlPort]);
+  }
+  /** Read access to the unsynced collection for this tab, beside the
+   * collection it shows: the source of an unsynced transfer. One per tab. */
+  async attachUnsynced(client, id4) {
+    if (client.source && client.source.generation !== this.unsynced?.generation) this.releaseSource(client);
+    if (client.source) throw new ApplicationWorkerError("application_worker_busy");
+    const connection = await this.ensureUnsynced();
+    if (client.gone || this.stopping) throw new ApplicationWorkerError("application_worker_fenced");
+    const value2 = connection.attach();
+    if (!value2) throw new ApplicationWorkerError("application_worker_unavailable");
+    client.source = value2;
+    client.sourceMark = Object.freeze({ generation: connection.generation, writes: connection.writes });
+    this.post(client, [APPLICATION_WORKER_PROTOCOL, client.binding, "handoff", id4, value2], [value2.dataPort, value2.controlPort]);
+  }
+  /** Whether a tab other than `client` shows or reads the unsynced collection. */
+  unsyncedHeldElsewhere(client, collection) {
+    for (const other of this.clients.values()) if (other !== client && !other.gone && (other.selected === collection || other.source?.scope.collection === collection)) return true;
+    return false;
+  }
+  /** Close the unsynced collection for good: this tab lets go of it first. */
+  async closeUnsynced(client) {
+    if (this.showsUnsynced(client)) this.leave(client);
+    this.releaseSource(client);
+    const open2 = this.unsynced;
+    this.unsynced = null;
+    await open2?.close();
+  }
+  /** After a transfer into the collection this tab shows: the unsynced
+   * collection becomes a retired copy of the signed-in account, and the next
+   * open starts a new one. Busy while another tab still works in it. */
+  async retireUnsynced(client, source, destination) {
+    const name2 = this.unsyncedOptions?.databaseName, account = this.session.getSnapshot().signIn?.accountId;
+    if (!name2 || !account || client.selected !== destination || this.session.connection(destination)?.isCurrent() !== true) throw new ApplicationWorkerError("application_worker_unavailable");
+    if (this.unsyncedHeldElsewhere(client, source)) throw new ApplicationWorkerError("application_worker_busy");
+    const open2 = this.unsynced?.scope.collection === source ? this.unsynced : null, mark = client.sourceMark;
+    client.sourceMark = null;
+    if (!open2 || !mark || open2.generation !== mark.generation || open2.writes !== mark.writes) throw new ApplicationWorkerError("application_worker_busy");
+    await this.closeUnsynced(client);
+    if (await retireAppUnsynced(name2, source, destination, account, this.lifetime.signal)) this.noteUnsyncedWork(null);
+  }
+  /** Discard the unsynced collection and erase it from this browser. A tab
+   * that showed it continues in a new, empty one. */
+  async discardUnsynced(client, id4) {
+    const name2 = this.unsyncedOptions?.databaseName;
+    if (!name2) throw new ApplicationWorkerError("application_worker_unavailable");
+    const current2 = await appUnsyncedIdentity(name2, false, this.lifetime.signal);
+    const showing = this.showsUnsynced(client);
+    if (current2) {
+      if (this.unsyncedHeldElsewhere(client, current2.collection)) {
+        if (showing) this.leave(client);
+        throw new ApplicationWorkerError("application_worker_busy");
+      }
+      if (this.unsynced?.scope.collection === current2.collection) await this.closeUnsynced(client);
+      else this.releaseSource(client);
+      const gone = await discardAppUnsynced(name2, current2.collection, this.lifetime.signal);
+      if (gone) await eraseAppUnsyncedStorage(gone);
+    }
+    this.noteUnsyncedWork(null);
+    if (showing) await this.openUnsynced(client, id4);
+  }
+  releaseSource(client) {
+    const source = client.source;
+    client.source = null;
+    if (source && this.unsynced?.generation === source.generation) try {
+      this.unsynced.detach(source);
+    } catch {
+    }
   }
   client(port, binding, primary) {
     const client = {
@@ -34391,6 +35058,8 @@ var ApplicationWorkerHost = class {
       generation: null,
       handoff: null,
       collection: null,
+      source: null,
+      sourceMark: null,
       onMessage: (event) => this.onMessage(client, event),
       onMessageError: () => primary ? this.failStop("application_worker_unavailable") : this.detach(client)
     };
@@ -34426,6 +35095,7 @@ var ApplicationWorkerHost = class {
     }
     for (let i = this.queue.length - 1; i >= 0; i--) if (this.queue[i].client === client) this.queue.splice(i, 1);
     this.leave(client);
+    this.releaseSource(client);
     client.port.removeEventListener("message", client.onMessage);
     client.port.removeEventListener("messageerror", client.onMessageError);
     client.port.close();
@@ -34441,7 +35111,7 @@ var ApplicationWorkerHost = class {
     client.generation = null;
     client.collection = null;
     if (!handoff || collection === null) return;
-    const connection = this.session.connection(collection);
+    const connection = this.connectionOf(collection);
     if (connection?.generation === handoff.generation) try {
       connection.detach?.(handoff);
     } catch {
@@ -34452,7 +35122,7 @@ var ApplicationWorkerHost = class {
     if (this.stopping) return;
     for (const client of [...this.clients.values()]) {
       if (client.gone || client.selected === null) continue;
-      const connection = this.session.connection(client.selected);
+      const connection = this.connectionOf(client.selected);
       if (!connection?.isCurrent() || typeof connection.attach !== "function" || client.generation === connection.generation) continue;
       const value2 = connection.attach();
       if (!value2) continue;
@@ -34466,18 +35136,31 @@ var ApplicationWorkerHost = class {
   /** Close, in turn with requests, each held collection no tab shows. */
   collect() {
     if (this.stopping || this.collecting) return;
-    const shown = /* @__PURE__ */ new Set();
-    for (const client of this.clients.values()) if (!client.gone && client.selected !== null) shown.add(client.selected);
-    if (!this.session.heldCollections().some((id4) => !shown.has(id4))) return;
+    const shown = this.shown();
+    const unsynced = this.unsynced !== null && !shown.has(this.unsynced.scope.collection);
+    if (!unsynced && !this.session.heldCollections().some((id4) => !shown.has(id4))) return;
     this.collecting = true;
     this.queue.push({ client: null, request: null, job: async () => {
       this.collecting = false;
-      const shown2 = /* @__PURE__ */ new Set();
-      for (const client of this.clients.values()) if (!client.gone && client.selected !== null) shown2.add(client.selected);
+      const shown2 = this.shown();
       for (const id4 of this.session.heldCollections()) if (!shown2.has(id4)) await this.session.releaseCollection(id4);
+      const open2 = this.unsynced;
+      if (open2 && !shown2.has(open2.scope.collection)) {
+        this.unsynced = null;
+        await open2.close();
+      }
     } });
     this.pump();
   }
+  /** Collections some tab shows, or reads as a transfer source. */
+  shown() {
+    const shown = /* @__PURE__ */ new Set();
+    for (const client of this.clients.values()) if (!client.gone) {
+      if (client.selected !== null) shown.add(client.selected);
+      if (client.source) shown.add(client.source.scope.collection);
+    }
+    return shown;
+  }
   post(client, value2, transfer = []) {
     if (client.gone) return;
     try {
@@ -34765,15 +35448,52 @@ var ApplicationWorkerHost = class {
         this.leave(client);
         this.collect();
         break;
+      case "openUnsynced":
+        try {
+          await this.openUnsynced(client, request3[2]);
+        } finally {
+          this.collect();
+        }
+        break;
+      case "attachUnsynced":
+        try {
+          await this.attachUnsynced(client, request3[2]);
+        } finally {
+          this.collect();
+        }
+        break;
+      case "detachUnsynced":
+        this.releaseSource(client);
+        this.collect();
+        break;
+      case "retireUnsynced": {
+        const [source, destination] = payload;
+        try {
+          await this.retireUnsynced(client, source, destination);
+        } finally {
+          this.collect();
+        }
+        break;
+      }
+      case "discardUnsynced":
+        try {
+          await this.discardUnsynced(client, request3[2]);
+        } finally {
+          this.collect();
+        }
+        break;
       case "forget":
         await this.session.forget(payload);
         break;
       case "refreshCollections":
         await this.session.refreshCollectionList();
         break;
-      case "signOut":
+      case "signOut": {
+        const account = this.session.getSnapshot().signIn?.accountId, name2 = this.unsyncedOptions?.databaseName;
         await this.session.signOut();
+        if (account && name2) await pruneAppUnsyncedRetired(name2, (copy2) => copy2.account === account, this.lifetime.signal);
         break;
+      }
       case "deleteCollection": {
         const [id4, name2] = payload;
         await this.session.deleteCollection(id4, name2);
@@ -34803,7 +35523,9 @@ var ApplicationWorkerHost = class {
     const pending = this.pending;
     this.queue.length = 0;
     this.stopping = Promise.resolve().then(async () => {
-      await this.session.close();
+      const unsynced = this.unsynced;
+      this.unsynced = null;
+      await Promise.all([this.session.close(), unsynced?.close()]);
       await pending;
       this.unsubscribe?.();
       this.unsubscribe = null;