@noy-db/hub 0.2.0-pre.25 → 0.2.0-pre.27

package/dist/{chunk-56ENKU46.js → chunk-KSKKLVPA.js}

@@ -1,3 +1,8 @@
+import {
+  StoreCoordinationProvider,
+  loadFence,
+  runDrainBarrier
+} from "./chunk-Z3BJF7SF.js";
 import {
   resolveSchema
 } from "./chunk-EMIGCR7X.js";
@@ -22,7 +27,7 @@ import {
   EXPORT_AUDIT_COLLECTION,
   createExportBlobsHandle,
   runCompaction
-} from "./chunk-ZCBJIDT4.js";
+} from "./chunk-RRCRITDM.js";
 import {
   LazyQuery,
   decodeIdxId,
@@ -40,16 +45,16 @@ import {
   resolveManagedSecret,
   savePersistedSchema,
   saveSealedPassphrase
-} from "./chunk-YP2AYE5W.js";
+} from "./chunk-SID2NJNF.js";
 import {
   writeNoydbBundle
-} from "./chunk-N4EXCKWP.js";
+} from "./chunk-6ZKXFMUG.js";
 import {
   loadPublicEnvelope,
   readPublicEnvelope,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-HUXDQIVU.js";
+} from "./chunk-2NYVA6FW.js";
 import {
   buildTombstone,
   isTombstone,
@@ -58,14 +63,14 @@ import {
   rewrapBodyToDek,
   rotateRecordCek,
   sealRecordToHost
-} from "./chunk-Y5CTT6K5.js";
+} from "./chunk-K6PCTYAH.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-FCIZXX56.js";
+} from "./chunk-BOMH3637.js";
 import {
   isDictCollectionName,
   isStaticDictDescriptor
-} from "./chunk-JJKXJAH2.js";
+} from "./chunk-PFKAT4NT.js";
 import {
   getAtPath,
   resolvePolicy,
@@ -92,7 +97,7 @@ import {
   saveShamirRecoveryEntries,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "./chunk-2RHBFCWQ.js";
+} from "./chunk-IWGVH2RR.js";
 import {
   assertTierAccess,
   dekKey
@@ -121,7 +126,7 @@ import {
   rotateKeys,
   saveUserEnvelope,
   updateKeyringIdentity
-} from "./chunk-UNBX2HMA.js";
+} from "./chunk-LXA2E3VI.js";
 import {
   INDEXED_STORE_POLICY
 } from "./chunk-2QR2PQTT.js";
@@ -131,7 +136,7 @@ import {
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
-} from "./chunk-EYZJULEN.js";
+} from "./chunk-6H4CAHMQ.js";
 import {
   sha256Hex as sha256Hex2
 } from "./chunk-PDVP3C2I.js";
@@ -143,11 +148,11 @@ import {
   readDottedPath,
   rebuildSubjectIndex,
   removeSubjectRef
-} from "./chunk-TSUICI5N.js";
+} from "./chunk-BMDVFBCL.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION
-} from "./chunk-LR7CODVN.js";
+} from "./chunk-AD6RNBAW.js";
 import {
   decrypt,
   encrypt,
@@ -179,7 +184,6 @@ import {
   NoydbError,
   NumberingUncertaintyError,
   PermissionDeniedError,
-  QuiesceTimeoutError,
   ReadOnlyError,
   ReservedCollectionNameError,
   SchemaFenceError,
@@ -2127,7 +2131,7 @@ var Collection = class {
           const outputCollection = this.derivationSource.getCollection(outSpec.collection);
           const txCtx = this.derivationSource.getActiveTxContext();
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-ZQT4Y7PF.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-OC4QVTS2.js");
             const prior = await loadFanoutSidecar(
               this.adapter,
               this.vault,
@@ -2490,7 +2494,7 @@ var Collection = class {
       for (const [outputKey, outSpec] of Object.entries(spec.outputs)) {
         if (outSpec.shape !== "array") continue;
         if (helpers === null) {
-          helpers = await import("./fanout-sidecar-ZQT4Y7PF.js");
+          helpers = await import("./fanout-sidecar-OC4QVTS2.js");
         }
         const sidecar = await helpers.loadFanoutSidecar(
           this.adapter,
@@ -5932,84 +5936,12 @@ var SchemaUpdateGate = class {
   }
 };
 
-// src/schema-update/fence.ts
-var FENCE_RECORD_ID = "schema-fence";
-var META_COLLECTION2 = "_meta";
-var DEFAULT_FENCE = { currentSchemaVersion: 0, fenceState: "normal" };
-async function loadFence(store, vault) {
-  const envelope = await store.get(vault, META_COLLECTION2, FENCE_RECORD_ID);
-  if (!envelope) return DEFAULT_FENCE;
-  try {
-    const parsed = JSON.parse(envelope._data);
-    if (!isFenceDoc(parsed)) return DEFAULT_FENCE;
-    return parsed;
-  } catch {
-    return DEFAULT_FENCE;
-  }
-}
-async function saveFence(store, vault, fence) {
-  const envelope = {
-    _noydb: NOYDB_FORMAT_VERSION,
-    _v: 1,
-    _ts: (/* @__PURE__ */ new Date()).toISOString(),
-    _iv: "",
-    _data: JSON.stringify(fence)
-  };
-  await store.put(vault, META_COLLECTION2, FENCE_RECORD_ID, envelope);
-}
-function isFenceDoc(x) {
-  if (x === null || typeof x !== "object") return false;
-  const o = x;
-  return typeof o["currentSchemaVersion"] === "number" && (o["fenceState"] === "normal" || o["fenceState"] === "draining" || o["fenceState"] === "migrating" || o["fenceState"] === "complete");
-}
-
-// src/schema-update/client-registry.ts
-var META_COLLECTION3 = "_meta";
-var CLIENT_PREFIX = "schema-fence:client:";
-async function writeClientDoc(store, vault, clientId, doc) {
-  const envelope = {
-    _noydb: NOYDB_FORMAT_VERSION,
-    _v: 1,
-    _ts: (/* @__PURE__ */ new Date()).toISOString(),
-    _iv: "",
-    _data: JSON.stringify({ clientId, ...doc })
-  };
-  await store.put(vault, META_COLLECTION3, `${CLIENT_PREFIX}${clientId}`, envelope);
-}
-async function listClientDocs(store, vault) {
-  const ids = await store.list(vault, META_COLLECTION3);
-  const out = [];
-  for (const id of ids) {
-    if (!id.startsWith(CLIENT_PREFIX)) continue;
-    const env = await store.get(vault, META_COLLECTION3, id);
-    if (!env) continue;
-    try {
-      const parsed = JSON.parse(env._data);
-      if (isClientDoc(parsed)) out.push(parsed);
-    } catch {
-    }
-  }
-  return out;
-}
-async function activeQuiesced(store, vault, opts) {
-  const docs = await listClientDocs(store, vault);
-  const active = docs.filter(
-    (d) => d.lastSeen >= opts.now - opts.staleMs && d.clientId !== opts.excludeClientId
-  );
-  return active.every((d) => d.quiescedAtVersion === opts.generation);
-}
-function isClientDoc(x) {
-  if (x === null || typeof x !== "object") return false;
-  const o = x;
-  return typeof o["clientId"] === "string" && typeof o["lastSeen"] === "number" && (o["quiescedAtVersion"] === null || typeof o["quiescedAtVersion"] === "number");
-}
-
 // src/schema-update/fence-controller.ts
 var SchemaFenceController = class {
-  #store;
+  #coordination;
   #vault;
   #onFlush;
-  #clientId;
+  #writerId;
   #now;
   #staleMs;
   #quiesceTimeoutMs;
@@ -6017,10 +5949,10 @@ var SchemaFenceController = class {
   #snapshot = 0;
   #pending = /* @__PURE__ */ new Map();
   constructor(opts) {
-    this.#store = opts.store;
+    this.#coordination = opts.coordination;
     this.#vault = opts.vault;
     this.#onFlush = opts.onFlush;
-    this.#clientId = opts.clientId ?? "migrator";
+    this.#writerId = opts.clientId ?? "migrator";
     this.#now = opts.now ?? (() => Date.now());
     this.#staleMs = opts.staleMs ?? 3e4;
     this.#quiesceTimeoutMs = opts.quiesceTimeoutMs ?? 6e4;
@@ -6029,7 +5961,7 @@ var SchemaFenceController = class {
   }
   /** Capture the generation snapshot at vault-open. */
   async init() {
-    this.#snapshot = (await loadFence(this.#store, this.#vault)).currentSchemaVersion;
+    this.#snapshot = (await this.#coordination.readFence(this.#vault)).currentSchemaVersion;
   }
   /** Record a per-collection pending cutover (from a registration `cutover` decision). */
   registerPendingCutover(collection, transform) {
@@ -6037,7 +5969,7 @@ var SchemaFenceController = class {
   }
   /** Write-path gate. Throws when behind, fenced, or this collection is cutover-pending. */
   async assertWritable(collection) {
-    const fence = await loadFence(this.#store, this.#vault);
+    const fence = await this.#coordination.readFence(this.#vault);
     if (fence.currentSchemaVersion > this.#snapshot) {
       throw new MigrationRequiredError(
         `Vault "${this.#vault}" advanced to schema generation ${fence.currentSchemaVersion} (this client opened at ${this.#snapshot}). Reload to continue.`
@@ -6056,61 +5988,59 @@ var SchemaFenceController = class {
    * Admin trigger. Drain → wait for the active set to quiesce (or time out)
    * → migrate each pending transform → bump → complete → normal. The
    * migrator excludes itself from the barrier (it drained synchronously
-   * here). `onPoll` (tests) advances other clients between barrier checks;
-   * production falls back to a short real delay.
+   * inside {@link runDrainBarrier}). `onPoll` (tests) advances other clients
+   * between barrier checks; production falls back to a short real delay.
    */
   async runCutover(run, opts) {
     if (this.#pending.size === 0) return { migrated: 0 };
-    const base = await loadFence(this.#store, this.#vault);
+    const base = await this.#coordination.readFence(this.#vault);
     const generation = base.currentSchemaVersion;
-    await this.#setState(generation, "draining");
-    await this.#onFlush();
-    const deadline = this.#now() + this.#quiesceTimeoutMs;
-    while (!await activeQuiesced(this.#store, this.#vault, {
-      generation,
-      now: this.#now(),
-      staleMs: this.#staleMs,
-      excludeClientId: this.#clientId
-    })) {
-      if (this.#now() >= deadline) {
-        throw new QuiesceTimeoutError(
-          `Cutover on "${this.#vault}" timed out waiting for clients to quiesce at generation ${generation}.`
-        );
-      }
-      await (opts?.onPoll ? opts.onPoll() : delay(50));
-    }
-    await this.#setState(generation, "migrating");
+    this.#emit({ currentSchemaVersion: generation, fenceState: "draining" });
     let migrated = 0;
-    for (const [collection, transform] of this.#pending) {
-      await run(collection, transform);
-      migrated++;
-    }
-    const nextVersion = generation + 1;
-    await this.#setState(nextVersion, "complete");
-    this.#pending.clear();
-    await this.#setState(nextVersion, "normal");
-    this.#snapshot = nextVersion;
+    await runDrainBarrier(
+      this.#coordination,
+      {
+        vault: this.#vault,
+        generation,
+        writerId: this.#writerId,
+        onFlush: this.#onFlush,
+        staleMs: this.#staleMs,
+        quiesceTimeoutMs: this.#quiesceTimeoutMs,
+        now: this.#now,
+        ...opts?.onPoll ? { onPoll: opts.onPoll } : {}
+      },
+      async () => {
+        await this.#setState(generation, "migrating");
+        for (const [collection, transform] of this.#pending) {
+          await run(collection, transform);
+          migrated++;
+        }
+        const nextVersion = generation + 1;
+        await this.#setState(nextVersion, "complete");
+        this.#pending.clear();
+        await this.#setState(nextVersion, "normal");
+        this.#snapshot = nextVersion;
+      }
+    );
     return { migrated };
   }
   /** Recover a stuck drain: reset fenceState to normal at the current version (no bump). */
   async abort() {
-    const fence = await loadFence(this.#store, this.#vault);
+    const fence = await this.#coordination.readFence(this.#vault);
     await this.#setState(fence.currentSchemaVersion, "normal");
   }
   async #setState(currentSchemaVersion, fenceState) {
-    await saveFence(this.#store, this.#vault, { currentSchemaVersion, fenceState });
+    await this.#coordination.setFence(this.#vault, { currentSchemaVersion, fenceState });
     this.#emit({ currentSchemaVersion, fenceState });
   }
 };
-function delay(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
 
 // src/schema-update/fence-watcher.ts
 var FenceWatcher = class {
-  #store;
+  #coordination;
   #vault;
-  #clientId;
+  #writerId;
+  #sessionId;
   #onFlush;
   #now;
   #emit;
@@ -6118,9 +6048,10 @@ var FenceWatcher = class {
   #quiescedAtVersion = null;
   #timer;
   constructor(opts) {
-    this.#store = opts.store;
+    this.#coordination = opts.coordination;
     this.#vault = opts.vault;
-    this.#clientId = opts.clientId;
+    this.#writerId = opts.clientId;
+    this.#sessionId = opts.sessionId ?? opts.clientId;
     this.#onFlush = opts.onFlush;
     this.#now = opts.now ?? (() => Date.now());
     this.#emit = opts.emit ?? (() => {
@@ -6128,14 +6059,16 @@ var FenceWatcher = class {
   }
   /** Publish liveness (and the current ack) without changing quiesce state. */
   async beat() {
-    await writeClientDoc(this.#store, this.#vault, this.#clientId, {
+    await this.#coordination.reportPresence(this.#vault, {
+      writerId: this.#writerId,
+      sessionId: this.#sessionId,
       lastSeen: this.#now(),
       quiescedAtVersion: this.#quiescedAtVersion
     });
   }
   /** Poll the fence; quiesce on draining; emit on transitions. */
   async check() {
-    const fence = await loadFence(this.#store, this.#vault);
+    const fence = await this.#coordination.readFence(this.#vault);
     if (fence.fenceState !== this.#lastState) {
       this.#lastState = fence.fenceState;
       this.#emit({ currentSchemaVersion: fence.currentSchemaVersion, fenceState: fence.fenceState });
@@ -6752,10 +6685,11 @@ var Vault = class {
     this.keyring = opts.keyring;
     this.encrypted = opts.encrypted;
     this.schemaFence = new SchemaFenceController({
-      store: this.adapter,
+      coordination: this.noydb.coordination,
       vault: this.name,
       onFlush: () => this.noydb._writeQueueTracker.onFlush(),
       clientId: this.noydb._clientId,
+      sessionId: this.noydb._sessionId,
       emit: (e) => this.emitter.emit("schema:fence-changed", { vault: this.name, ...e })
     });
     this.emitter = opts.emitter;
@@ -7151,9 +7085,10 @@ var Vault = class {
     if (this.#fenceCoordinationStarted) return;
     this.#fenceCoordinationStarted = true;
     this.#fenceWatcher = new FenceWatcher({
-      store: this.adapter,
+      coordination: this.noydb.coordination,
       vault: this.name,
       clientId: this.noydb._clientId,
+      sessionId: this.noydb._sessionId,
       onFlush: () => this.noydb._writeQueueTracker.onFlush(),
       emit: (e) => this.emitter.emit("schema:fence-changed", { vault: this.name, ...e })
     });
@@ -7711,12 +7646,12 @@ var Vault = class {
     if (!fieldSchema) {
       throw new AttestationError(`issueAttestation: collection '${collectionName}' has no attestation field-schema. Declare it via vault.collection('${collectionName}', { attestation: { fields: [...] } }).`);
     }
-    const { issueAttestationCore } = await import("./issue-LEBPVF3Y.js");
+    const { issueAttestationCore } = await import("./issue-ZZ2XPOGP.js");
     const out = await issueAttestationCore(this.makeIssueContext(), { collection: collectionName, id, fieldSchema });
     return { docId: out.docId, qr: out.qr, keyId: out.keyId, publicKeyB64: out.publicKeyB64 };
   }
   async getDocumentSigningPublicKey() {
-    const { loadSigner, loadOrCreateSigner } = await import("./signer-NEQPCHMW.js");
+    const { loadSigner, loadOrCreateSigner } = await import("./signer-SCJ6C6HQ.js");
     const existing = await loadSigner(this.adapter, this.name, this.getDEK);
     if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
     if (this.keyring.role !== "owner") {
@@ -7742,19 +7677,19 @@ var Vault = class {
     };
   }
   async revokeAttestation(docId) {
-    const { revokeDocCore } = await import("./revoke-P5D3UTRX.js");
+    const { revokeDocCore } = await import("./revoke-QJ2HUM4W.js");
     await revokeDocCore(this.makeRevokeContext(), docId);
   }
   async unrevokeAttestation(docId) {
-    const { unrevokeDocCore } = await import("./revoke-P5D3UTRX.js");
+    const { unrevokeDocCore } = await import("./revoke-QJ2HUM4W.js");
     await unrevokeDocCore(this.makeRevokeContext(), docId);
   }
   async getRevokedDocIds() {
-    const { getRevokedDocIdsCore } = await import("./revoke-P5D3UTRX.js");
+    const { getRevokedDocIdsCore } = await import("./revoke-QJ2HUM4W.js");
     return getRevokedDocIdsCore(this.makeRevokeContext());
   }
   async publishRevocationList() {
-    const { publishRevocationListCore } = await import("./revoke-P5D3UTRX.js");
+    const { publishRevocationListCore } = await import("./revoke-QJ2HUM4W.js");
     return publishRevocationListCore(this.makeRevokeContext());
   }
   makeRevokeContext() {
@@ -8562,7 +8497,7 @@ var Vault = class {
           if (!outSpec) continue;
           const outputColl = this.collection(outSpec.collection);
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-ZQT4Y7PF.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-OC4QVTS2.js");
             const prior = await loadFanoutSidecar(this.adapter, this.name, spec.source, id, key);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -9276,7 +9211,7 @@ var Vault = class {
    * @see docs/subsystems/public-envelope.md
    */
   async getPublicEnvelope(opts = {}) {
-    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-DBKJEBBF.js");
+    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-O6X6AUUS.js");
     return readPublicEnvelope2(this.adapter, this.name, opts);
   }
   /**
@@ -10822,6 +10757,10 @@ var Noydb = class {
   writeHooks = new WriteHookRegistry();
   subsystemBus = new SubsystemBus();
   clientId = generateULID();
+  /** Session that owns this instance's writers (one user's writers across vaults). */
+  sessionId;
+  /** Drain-barrier coordination transport for the schema fence (#469). */
+  coordinationProvider;
   vaultCache = /* @__PURE__ */ new Map();
   keyringCache = /* @__PURE__ */ new Map();
   syncEngines = /* @__PURE__ */ new Map();
@@ -10896,6 +10835,8 @@ var Noydb = class {
         "[noydb] debugPlaintext is ON \u2014 records are stored UNENCRYPTED and laid out for native store inspection. NEVER use this for production or client data."
       );
     }
+    this.sessionId = options.sessionId ?? generateULID();
+    this.coordinationProvider = options.coordinationStrategy ?? new StoreCoordinationProvider(options.store);
     this.txStrategy = options.txStrategy ?? NO_TX;
     this.forgetStrategy = options.forgetStrategy ?? NO_FORGET;
     this.sessionStrategy = options.sessionStrategy ?? NO_SESSION;
@@ -11949,6 +11890,18 @@ var Noydb = class {
   get _clientId() {
     return this.clientId;
   }
+  /** @internal Session that owns this instance's writers (#469). */
+  get _sessionId() {
+    return this.sessionId;
+  }
+  /**
+   * @internal Drain-barrier coordination transport for the schema fence (#469).
+   * The default store-backed provider reproduces today's fence behavior; a
+   * `by-*` real-time transport is injected via `coordinationStrategy`.
+   */
+  get coordination() {
+    return this.coordinationProvider;
+  }
   /**
    * Soft-lock a single vault: clear its in-memory keyring, DEKs, vault
    * instance, sync engine, policy enforcer, and active-tier entry —
@@ -13184,4 +13137,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-56ENKU46.js.map
+//# sourceMappingURL=chunk-KSKKLVPA.js.map