@noy-db/hub 0.2.0-pre.26 → 0.2.0-pre.28

package/dist/{chunk-56ENKU46.js → chunk-3LHTFCU2.js}

@@ -1,3 +1,8 @@
+import {
+  StoreCoordinationProvider,
+  loadFence,
+  runDrainBarrier
+} from "./chunk-M2VZQ24Q.js";
 import {
   resolveSchema
 } from "./chunk-EMIGCR7X.js";
@@ -17,12 +22,12 @@ import {
   decodeMoneyFields,
   quantizeMoneyFields,
   validateMoneyFieldPaths
-} from "./chunk-PS6PSEZL.js";
+} from "./chunk-2M62POB5.js";
 import {
   EXPORT_AUDIT_COLLECTION,
   createExportBlobsHandle,
   runCompaction
-} from "./chunk-ZCBJIDT4.js";
+} from "./chunk-DCYWBKQ2.js";
 import {
   LazyQuery,
   decodeIdxId,
@@ -30,7 +35,7 @@ import {
 } from "./chunk-H4XFA2LM.js";
 import {
   canonicalGroupKey
-} from "./chunk-C7UIT5XY.js";
+} from "./chunk-345PYZD6.js";
 import {
   readPath
 } from "./chunk-3BANVNDH.js";
@@ -40,16 +45,16 @@ import {
   resolveManagedSecret,
   savePersistedSchema,
   saveSealedPassphrase
-} from "./chunk-YP2AYE5W.js";
+} from "./chunk-JEQB2KVI.js";
 import {
   writeNoydbBundle
-} from "./chunk-N4EXCKWP.js";
+} from "./chunk-7TBCLM52.js";
 import {
   loadPublicEnvelope,
   readPublicEnvelope,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-HUXDQIVU.js";
+} from "./chunk-PPF7Z2YQ.js";
 import {
   buildTombstone,
   isTombstone,
@@ -58,19 +63,20 @@ import {
   rewrapBodyToDek,
   rotateRecordCek,
   sealRecordToHost
-} from "./chunk-Y5CTT6K5.js";
+} from "./chunk-DMWUOV7X.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-FCIZXX56.js";
+} from "./chunk-GVEUI7VR.js";
 import {
   isDictCollectionName,
   isStaticDictDescriptor
-} from "./chunk-JJKXJAH2.js";
+} from "./chunk-HQ242WNG.js";
 import {
   getAtPath,
   resolvePolicy,
-  setAtPathInPlace
-} from "./chunk-KD253AI5.js";
+  setAtPathInPlace,
+  stripI18nFilled
+} from "./chunk-6LD37AMK.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
@@ -92,7 +98,7 @@ import {
   saveShamirRecoveryEntries,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "./chunk-2RHBFCWQ.js";
+} from "./chunk-QBC2TZHC.js";
 import {
   assertTierAccess,
   dekKey
@@ -121,7 +127,7 @@ import {
   rotateKeys,
   saveUserEnvelope,
   updateKeyringIdentity
-} from "./chunk-UNBX2HMA.js";
+} from "./chunk-VSL3W2MO.js";
 import {
   INDEXED_STORE_POLICY
 } from "./chunk-2QR2PQTT.js";
@@ -131,7 +137,7 @@ import {
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
-} from "./chunk-EYZJULEN.js";
+} from "./chunk-7GKDVWMD.js";
 import {
   sha256Hex as sha256Hex2
 } from "./chunk-PDVP3C2I.js";
@@ -143,11 +149,11 @@ import {
   readDottedPath,
   rebuildSubjectIndex,
   removeSubjectRef
-} from "./chunk-TSUICI5N.js";
+} from "./chunk-RG5KLMEU.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION
-} from "./chunk-LR7CODVN.js";
+} from "./chunk-QSLIT4JZ.js";
 import {
   decrypt,
   encrypt,
@@ -179,7 +185,6 @@ import {
   NoydbError,
   NumberingUncertaintyError,
   PermissionDeniedError,
-  QuiesceTimeoutError,
   ReadOnlyError,
   ReservedCollectionNameError,
   SchemaFenceError,
@@ -414,6 +419,11 @@ var NO_I18N = {
   enforceScript(value) {
     return { value, warnings: [] };
   },
+  computeExemptFills() {
+    return /* @__PURE__ */ new Map();
+  },
+  densify() {
+  },
   buildDictionaryHandle() {
     throw notEnabled("vault.dictionary()");
   }
@@ -1107,6 +1117,12 @@ var Collection = class {
    * Declared via the `i18nFields` collection option.
    */
   i18nFields;
+  /**
+   * #435 — the densify-enabled subset of {@link i18nFields} (fields whose
+   * descriptor opts in via `densifyOnWrite: true`). `undefined` when none opt
+   * in, so the write path skips all densify work for ordinary collections.
+   */
+  i18nDensifyFields;
   /**
    * Map of field name → `DictKeyDescriptor` for fields declared with
    * `dictKey()`. Used by `get()`/`list()` to add `<field>Label` virtual
@@ -1293,6 +1309,10 @@ var Collection = class {
     this.refEnforcer = opts.refEnforcer;
     this.joinResolver = opts.joinResolver;
     this.i18nFields = opts.i18nFields;
+    const densifyFields = opts.i18nFields ? Object.fromEntries(
+      Object.entries(opts.i18nFields).filter(([, d]) => d.options.densifyOnWrite === true)
+    ) : {};
+    this.i18nDensifyFields = Object.keys(densifyFields).length > 0 ? densifyFields : void 0;
     this.dictKeyFields = opts.dictKeyFields;
     if (opts.moneyFields) validateMoneyFieldPaths(opts.moneyFields);
     this.moneyFields = opts.moneyFields;
@@ -1466,7 +1486,7 @@ var Collection = class {
       }
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-KKCHF2VB.js");
+      const { resolveStaleMVOnRead } = await import("./stale-BCIE3SMC.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name);
     }
     let record;
@@ -1612,6 +1632,32 @@ var Collection = class {
       if (busAfterPut) await this.subsystemBus.dispatch("afterPut", event);
     }
   }
+  /**
+   * #435 — resolve the prior stored record (with its `_i18nFilled` marker) for
+   * densify. Eager: in-memory cache; lazy: LRU then adapter. undefined if absent.
+   */
+  async resolveDensifyPrior(id) {
+    if (this.lazy && this.lru) {
+      const cached = this.lru.get(id);
+      if (cached) return cached.record;
+      const env = await this.adapter.get(this.vault, this.name, id);
+      if (!env) return void 0;
+      const rec = await this.decryptRecord(env);
+      return rec === null ? void 0 : rec;
+    }
+    await this.ensureHydrated();
+    return this.cache.get(id)?.record;
+  }
+  /**
+   * #435 — densify provenance for a record: which i18n slots were auto-filled,
+   * e.g. `{ name: ['en'] }`. undefined when nothing was filled. The marker is
+   * stripped from ordinary reads; this is the sanctioned audit accessor.
+   */
+  async i18nProvenance(id) {
+    const prior = await this.resolveDensifyPrior(id);
+    const marker = prior?.["_i18nFilled"];
+    return marker && Object.keys(marker).length > 0 ? marker : void 0;
+  }
   /**
    * Validate a record against this collection's schema WITHOUT writing it.
    * Returns the (possibly coerced) record on success; throws
@@ -1726,6 +1772,16 @@ var Collection = class {
         setAtPathInPlace(obj, field, translated);
       }
     }
+    let densifyPrior;
+    let exemptFills;
+    if (this.i18nDensifyFields) {
+      densifyPrior = await this.resolveDensifyPrior(id);
+      exemptFills = this.i18nStrategy.computeExemptFills(
+        densifyPrior,
+        record,
+        this.i18nDensifyFields
+      );
+    }
     if (this.i18nFields) {
       const obj = record;
       for (const [field, descriptor] of Object.entries(this.i18nFields)) {
@@ -1733,18 +1789,38 @@ var Collection = class {
         for (const leaf of getAtPath(obj, field)) {
           if (!leaf || typeof leaf !== "object" || Array.isArray(leaf)) continue;
           const leafMap = leaf;
-          const { value: cleaned } = this.i18nStrategy.enforceScript(
+          const { value: cleaned, warnings } = this.i18nStrategy.enforceScript(
             leafMap,
             field,
-            descriptor
+            descriptor,
+            exemptFills?.get(field)
           );
           if (cleaned !== leafMap) Object.assign(leafMap, cleaned);
+          const mode = descriptor.options.onScriptViolation;
+          if (mode === "warn" || mode === "filter") {
+            for (const w of warnings) {
+              this.emitter.emit("i18n:script-violation", {
+                vault: this.vault,
+                collection: this.name,
+                id,
+                mode,
+                warning: w
+              });
+            }
+          }
         }
       }
     }
     if (this.i18nPutValidator !== void 0) {
       this.i18nPutValidator(record);
     }
+    if (this.i18nDensifyFields) {
+      this.i18nStrategy.densify(
+        record,
+        densifyPrior,
+        this.i18nDensifyFields
+      );
+    }
     if (this.refEnforcer !== void 0) {
       await this.refEnforcer.enforceRefsOnPut(this.name, record);
     }
@@ -1925,7 +2001,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-BIW4FT5R.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-PJHMRZWJ.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -1934,7 +2010,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-KKCHF2VB.js");
+          staleHelpers = await import("./stale-BCIE3SMC.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -2127,7 +2203,7 @@ var Collection = class {
           const outputCollection = this.derivationSource.getCollection(outSpec.collection);
           const txCtx = this.derivationSource.getActiveTxContext();
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-ZQT4Y7PF.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-DSBVAR2P.js");
             const prior = await loadFanoutSidecar(
               this.adapter,
               this.vault,
@@ -2490,7 +2566,7 @@ var Collection = class {
       for (const [outputKey, outSpec] of Object.entries(spec.outputs)) {
         if (outSpec.shape !== "array") continue;
         if (helpers === null) {
-          helpers = await import("./fanout-sidecar-ZQT4Y7PF.js");
+          helpers = await import("./fanout-sidecar-DSBVAR2P.js");
         }
         const sidecar = await helpers.loadFanoutSidecar(
           this.adapter,
@@ -2530,7 +2606,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-BIW4FT5R.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-PJHMRZWJ.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -2539,7 +2615,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-KKCHF2VB.js");
+          staleHelpers = await import("./stale-BCIE3SMC.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -2562,7 +2638,7 @@ var Collection = class {
       );
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-KKCHF2VB.js");
+      const { resolveStaleMVOnRead } = await import("./stale-BCIE3SMC.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name);
     }
     await this.ensureHydrated();
@@ -2598,7 +2674,7 @@ var Collection = class {
     }
     await this.ensureHydrated();
     const entries = [];
-    for (const [id, e] of this.cache) entries.push({ id, record: e.record });
+    for (const [id, e] of this.cache) entries.push({ id, record: stripI18nFilled(e.record) });
     return searchScan(entries, field, query, opts);
   }
   // ─── Bulk operations ─────────────────────────────────────
@@ -3512,7 +3588,7 @@ var Collection = class {
     const hasStaticDisplay = hasDict && this.dictKeyFields !== void 0 && Object.values(this.dictKeyFields).some(
       (d) => isStaticDictDescriptor(d) && d.displayLocale !== void 0
     );
-    if (!locale && !hasStaticDisplay) return result;
+    if (!locale && !hasStaticDisplay) return stripI18nFilled(result);
     const layer = localeOpts?._layer ?? "read";
     if (locale && hasI18n && this.i18nFields) {
       result = this.i18nStrategy.applyI18nLocale(result, this.i18nFields, locale, localeOpts?.fallback, layer);
@@ -3579,7 +3655,7 @@ var Collection = class {
       }
       result = withLabels;
     }
-    return result;
+    return stripI18nFilled(result);
   }
   /**
    * Low-level: encrypt a pre-serialised JSON string into an EncryptedEnvelope.
@@ -5932,84 +6008,12 @@ var SchemaUpdateGate = class {
   }
 };
 
-// src/schema-update/fence.ts
-var FENCE_RECORD_ID = "schema-fence";
-var META_COLLECTION2 = "_meta";
-var DEFAULT_FENCE = { currentSchemaVersion: 0, fenceState: "normal" };
-async function loadFence(store, vault) {
-  const envelope = await store.get(vault, META_COLLECTION2, FENCE_RECORD_ID);
-  if (!envelope) return DEFAULT_FENCE;
-  try {
-    const parsed = JSON.parse(envelope._data);
-    if (!isFenceDoc(parsed)) return DEFAULT_FENCE;
-    return parsed;
-  } catch {
-    return DEFAULT_FENCE;
-  }
-}
-async function saveFence(store, vault, fence) {
-  const envelope = {
-    _noydb: NOYDB_FORMAT_VERSION,
-    _v: 1,
-    _ts: (/* @__PURE__ */ new Date()).toISOString(),
-    _iv: "",
-    _data: JSON.stringify(fence)
-  };
-  await store.put(vault, META_COLLECTION2, FENCE_RECORD_ID, envelope);
-}
-function isFenceDoc(x) {
-  if (x === null || typeof x !== "object") return false;
-  const o = x;
-  return typeof o["currentSchemaVersion"] === "number" && (o["fenceState"] === "normal" || o["fenceState"] === "draining" || o["fenceState"] === "migrating" || o["fenceState"] === "complete");
-}
-
-// src/schema-update/client-registry.ts
-var META_COLLECTION3 = "_meta";
-var CLIENT_PREFIX = "schema-fence:client:";
-async function writeClientDoc(store, vault, clientId, doc) {
-  const envelope = {
-    _noydb: NOYDB_FORMAT_VERSION,
-    _v: 1,
-    _ts: (/* @__PURE__ */ new Date()).toISOString(),
-    _iv: "",
-    _data: JSON.stringify({ clientId, ...doc })
-  };
-  await store.put(vault, META_COLLECTION3, `${CLIENT_PREFIX}${clientId}`, envelope);
-}
-async function listClientDocs(store, vault) {
-  const ids = await store.list(vault, META_COLLECTION3);
-  const out = [];
-  for (const id of ids) {
-    if (!id.startsWith(CLIENT_PREFIX)) continue;
-    const env = await store.get(vault, META_COLLECTION3, id);
-    if (!env) continue;
-    try {
-      const parsed = JSON.parse(env._data);
-      if (isClientDoc(parsed)) out.push(parsed);
-    } catch {
-    }
-  }
-  return out;
-}
-async function activeQuiesced(store, vault, opts) {
-  const docs = await listClientDocs(store, vault);
-  const active = docs.filter(
-    (d) => d.lastSeen >= opts.now - opts.staleMs && d.clientId !== opts.excludeClientId
-  );
-  return active.every((d) => d.quiescedAtVersion === opts.generation);
-}
-function isClientDoc(x) {
-  if (x === null || typeof x !== "object") return false;
-  const o = x;
-  return typeof o["clientId"] === "string" && typeof o["lastSeen"] === "number" && (o["quiescedAtVersion"] === null || typeof o["quiescedAtVersion"] === "number");
-}
-
 // src/schema-update/fence-controller.ts
 var SchemaFenceController = class {
-  #store;
+  #coordination;
   #vault;
   #onFlush;
-  #clientId;
+  #writerId;
   #now;
   #staleMs;
   #quiesceTimeoutMs;
@@ -6017,10 +6021,10 @@ var SchemaFenceController = class {
   #snapshot = 0;
   #pending = /* @__PURE__ */ new Map();
   constructor(opts) {
-    this.#store = opts.store;
+    this.#coordination = opts.coordination;
     this.#vault = opts.vault;
     this.#onFlush = opts.onFlush;
-    this.#clientId = opts.clientId ?? "migrator";
+    this.#writerId = opts.clientId ?? "migrator";
     this.#now = opts.now ?? (() => Date.now());
     this.#staleMs = opts.staleMs ?? 3e4;
     this.#quiesceTimeoutMs = opts.quiesceTimeoutMs ?? 6e4;
@@ -6029,7 +6033,7 @@ var SchemaFenceController = class {
   }
   /** Capture the generation snapshot at vault-open. */
   async init() {
-    this.#snapshot = (await loadFence(this.#store, this.#vault)).currentSchemaVersion;
+    this.#snapshot = (await this.#coordination.readFence(this.#vault)).currentSchemaVersion;
   }
   /** Record a per-collection pending cutover (from a registration `cutover` decision). */
   registerPendingCutover(collection, transform) {
@@ -6037,7 +6041,7 @@ var SchemaFenceController = class {
   }
   /** Write-path gate. Throws when behind, fenced, or this collection is cutover-pending. */
   async assertWritable(collection) {
-    const fence = await loadFence(this.#store, this.#vault);
+    const fence = await this.#coordination.readFence(this.#vault);
     if (fence.currentSchemaVersion > this.#snapshot) {
       throw new MigrationRequiredError(
         `Vault "${this.#vault}" advanced to schema generation ${fence.currentSchemaVersion} (this client opened at ${this.#snapshot}). Reload to continue.`
@@ -6056,61 +6060,59 @@ var SchemaFenceController = class {
    * Admin trigger. Drain → wait for the active set to quiesce (or time out)
    * → migrate each pending transform → bump → complete → normal. The
    * migrator excludes itself from the barrier (it drained synchronously
-   * here). `onPoll` (tests) advances other clients between barrier checks;
-   * production falls back to a short real delay.
+   * inside {@link runDrainBarrier}). `onPoll` (tests) advances other clients
+   * between barrier checks; production falls back to a short real delay.
    */
   async runCutover(run, opts) {
     if (this.#pending.size === 0) return { migrated: 0 };
-    const base = await loadFence(this.#store, this.#vault);
+    const base = await this.#coordination.readFence(this.#vault);
     const generation = base.currentSchemaVersion;
-    await this.#setState(generation, "draining");
-    await this.#onFlush();
-    const deadline = this.#now() + this.#quiesceTimeoutMs;
-    while (!await activeQuiesced(this.#store, this.#vault, {
-      generation,
-      now: this.#now(),
-      staleMs: this.#staleMs,
-      excludeClientId: this.#clientId
-    })) {
-      if (this.#now() >= deadline) {
-        throw new QuiesceTimeoutError(
-          `Cutover on "${this.#vault}" timed out waiting for clients to quiesce at generation ${generation}.`
-        );
-      }
-      await (opts?.onPoll ? opts.onPoll() : delay(50));
-    }
-    await this.#setState(generation, "migrating");
+    this.#emit({ currentSchemaVersion: generation, fenceState: "draining" });
     let migrated = 0;
-    for (const [collection, transform] of this.#pending) {
-      await run(collection, transform);
-      migrated++;
-    }
-    const nextVersion = generation + 1;
-    await this.#setState(nextVersion, "complete");
-    this.#pending.clear();
-    await this.#setState(nextVersion, "normal");
-    this.#snapshot = nextVersion;
+    await runDrainBarrier(
+      this.#coordination,
+      {
+        vault: this.#vault,
+        generation,
+        writerId: this.#writerId,
+        onFlush: this.#onFlush,
+        staleMs: this.#staleMs,
+        quiesceTimeoutMs: this.#quiesceTimeoutMs,
+        now: this.#now,
+        ...opts?.onPoll ? { onPoll: opts.onPoll } : {}
+      },
+      async () => {
+        await this.#setState(generation, "migrating");
+        for (const [collection, transform] of this.#pending) {
+          await run(collection, transform);
+          migrated++;
+        }
+        const nextVersion = generation + 1;
+        await this.#setState(nextVersion, "complete");
+        this.#pending.clear();
+        await this.#setState(nextVersion, "normal");
+        this.#snapshot = nextVersion;
+      }
+    );
     return { migrated };
   }
   /** Recover a stuck drain: reset fenceState to normal at the current version (no bump). */
   async abort() {
-    const fence = await loadFence(this.#store, this.#vault);
+    const fence = await this.#coordination.readFence(this.#vault);
     await this.#setState(fence.currentSchemaVersion, "normal");
   }
   async #setState(currentSchemaVersion, fenceState) {
-    await saveFence(this.#store, this.#vault, { currentSchemaVersion, fenceState });
+    await this.#coordination.setFence(this.#vault, { currentSchemaVersion, fenceState });
     this.#emit({ currentSchemaVersion, fenceState });
   }
 };
-function delay(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
 
 // src/schema-update/fence-watcher.ts
 var FenceWatcher = class {
-  #store;
+  #coordination;
   #vault;
-  #clientId;
+  #writerId;
+  #sessionId;
   #onFlush;
   #now;
   #emit;
@@ -6118,9 +6120,10 @@ var FenceWatcher = class {
   #quiescedAtVersion = null;
   #timer;
   constructor(opts) {
-    this.#store = opts.store;
+    this.#coordination = opts.coordination;
     this.#vault = opts.vault;
-    this.#clientId = opts.clientId;
+    this.#writerId = opts.clientId;
+    this.#sessionId = opts.sessionId ?? opts.clientId;
     this.#onFlush = opts.onFlush;
     this.#now = opts.now ?? (() => Date.now());
     this.#emit = opts.emit ?? (() => {
@@ -6128,14 +6131,16 @@ var FenceWatcher = class {
   }
   /** Publish liveness (and the current ack) without changing quiesce state. */
   async beat() {
-    await writeClientDoc(this.#store, this.#vault, this.#clientId, {
+    await this.#coordination.reportPresence(this.#vault, {
+      writerId: this.#writerId,
+      sessionId: this.#sessionId,
       lastSeen: this.#now(),
       quiescedAtVersion: this.#quiescedAtVersion
     });
   }
   /** Poll the fence; quiesce on draining; emit on transitions. */
   async check() {
-    const fence = await loadFence(this.#store, this.#vault);
+    const fence = await this.#coordination.readFence(this.#vault);
     if (fence.fenceState !== this.#lastState) {
       this.#lastState = fence.fenceState;
       this.#emit({ currentSchemaVersion: fence.currentSchemaVersion, fenceState: fence.fenceState });
@@ -6752,10 +6757,11 @@ var Vault = class {
     this.keyring = opts.keyring;
     this.encrypted = opts.encrypted;
     this.schemaFence = new SchemaFenceController({
-      store: this.adapter,
+      coordination: this.noydb.coordination,
       vault: this.name,
       onFlush: () => this.noydb._writeQueueTracker.onFlush(),
       clientId: this.noydb._clientId,
+      sessionId: this.noydb._sessionId,
       emit: (e) => this.emitter.emit("schema:fence-changed", { vault: this.name, ...e })
     });
     this.emitter = opts.emitter;
@@ -7151,9 +7157,10 @@ var Vault = class {
     if (this.#fenceCoordinationStarted) return;
     this.#fenceCoordinationStarted = true;
     this.#fenceWatcher = new FenceWatcher({
-      store: this.adapter,
+      coordination: this.noydb.coordination,
       vault: this.name,
       clientId: this.noydb._clientId,
+      sessionId: this.noydb._sessionId,
       onFlush: () => this.noydb._writeQueueTracker.onFlush(),
       emit: (e) => this.emitter.emit("schema:fence-changed", { vault: this.name, ...e })
     });
@@ -7711,12 +7718,12 @@ var Vault = class {
     if (!fieldSchema) {
       throw new AttestationError(`issueAttestation: collection '${collectionName}' has no attestation field-schema. Declare it via vault.collection('${collectionName}', { attestation: { fields: [...] } }).`);
     }
-    const { issueAttestationCore } = await import("./issue-LEBPVF3Y.js");
+    const { issueAttestationCore } = await import("./issue-JSGGSVY4.js");
     const out = await issueAttestationCore(this.makeIssueContext(), { collection: collectionName, id, fieldSchema });
     return { docId: out.docId, qr: out.qr, keyId: out.keyId, publicKeyB64: out.publicKeyB64 };
   }
   async getDocumentSigningPublicKey() {
-    const { loadSigner, loadOrCreateSigner } = await import("./signer-NEQPCHMW.js");
+    const { loadSigner, loadOrCreateSigner } = await import("./signer-ADFJNS5W.js");
     const existing = await loadSigner(this.adapter, this.name, this.getDEK);
     if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
     if (this.keyring.role !== "owner") {
@@ -7742,19 +7749,19 @@ var Vault = class {
     };
   }
   async revokeAttestation(docId) {
-    const { revokeDocCore } = await import("./revoke-P5D3UTRX.js");
+    const { revokeDocCore } = await import("./revoke-DBAGKIDA.js");
     await revokeDocCore(this.makeRevokeContext(), docId);
   }
   async unrevokeAttestation(docId) {
-    const { unrevokeDocCore } = await import("./revoke-P5D3UTRX.js");
+    const { unrevokeDocCore } = await import("./revoke-DBAGKIDA.js");
     await unrevokeDocCore(this.makeRevokeContext(), docId);
   }
   async getRevokedDocIds() {
-    const { getRevokedDocIdsCore } = await import("./revoke-P5D3UTRX.js");
+    const { getRevokedDocIdsCore } = await import("./revoke-DBAGKIDA.js");
     return getRevokedDocIdsCore(this.makeRevokeContext());
   }
   async publishRevocationList() {
-    const { publishRevocationListCore } = await import("./revoke-P5D3UTRX.js");
+    const { publishRevocationListCore } = await import("./revoke-DBAGKIDA.js");
     return publishRevocationListCore(this.makeRevokeContext());
   }
   makeRevokeContext() {
@@ -8515,13 +8522,13 @@ var Vault = class {
     if (!reg) {
       throw new Error(`refreshView: no MV registered with name "${name}"`);
     }
-    const { MaterializedViewExecutor } = await import("./executor-BIW4FT5R.js");
+    const { MaterializedViewExecutor } = await import("./executor-PJHMRZWJ.js");
     const result = await MaterializedViewExecutor.refresh(reg, {
       getCollection: (n) => this.collection(n),
       getActiveTxContext: () => this.noydb._activeTxContextOrNull,
       getQueryContext: () => this
     });
-    const { clearMVStale } = await import("./stale-KKCHF2VB.js");
+    const { clearMVStale } = await import("./stale-BCIE3SMC.js");
     clearMVStale(registry, name);
     return result;
   }
@@ -8562,7 +8569,7 @@ var Vault = class {
           if (!outSpec) continue;
           const outputColl = this.collection(outSpec.collection);
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-ZQT4Y7PF.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-DSBVAR2P.js");
             const prior = await loadFanoutSidecar(this.adapter, this.name, spec.source, id, key);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -9276,7 +9283,7 @@ var Vault = class {
    * @see docs/subsystems/public-envelope.md
    */
   async getPublicEnvelope(opts = {}) {
-    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-DBKJEBBF.js");
+    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-7MTH2PVE.js");
     return readPublicEnvelope2(this.adapter, this.name, opts);
   }
   /**
@@ -10822,6 +10829,10 @@ var Noydb = class {
   writeHooks = new WriteHookRegistry();
   subsystemBus = new SubsystemBus();
   clientId = generateULID();
+  /** Session that owns this instance's writers (one user's writers across vaults). */
+  sessionId;
+  /** Drain-barrier coordination transport for the schema fence (#469). */
+  coordinationProvider;
   vaultCache = /* @__PURE__ */ new Map();
   keyringCache = /* @__PURE__ */ new Map();
   syncEngines = /* @__PURE__ */ new Map();
@@ -10896,6 +10907,8 @@ var Noydb = class {
         "[noydb] debugPlaintext is ON \u2014 records are stored UNENCRYPTED and laid out for native store inspection. NEVER use this for production or client data."
       );
     }
+    this.sessionId = options.sessionId ?? generateULID();
+    this.coordinationProvider = options.coordinationStrategy ?? new StoreCoordinationProvider(options.store);
     this.txStrategy = options.txStrategy ?? NO_TX;
     this.forgetStrategy = options.forgetStrategy ?? NO_FORGET;
     this.sessionStrategy = options.sessionStrategy ?? NO_SESSION;
@@ -11949,6 +11962,18 @@ var Noydb = class {
   get _clientId() {
     return this.clientId;
   }
+  /** @internal Session that owns this instance's writers (#469). */
+  get _sessionId() {
+    return this.sessionId;
+  }
+  /**
+   * @internal Drain-barrier coordination transport for the schema fence (#469).
+   * The default store-backed provider reproduces today's fence behavior; a
+   * `by-*` real-time transport is injected via `coordinationStrategy`.
+   */
+  get coordination() {
+    return this.coordinationProvider;
+  }
   /**
    * Soft-lock a single vault: clear its in-memory keyring, DEKs, vault
    * instance, sync engine, policy enforcer, and active-tier entry —
@@ -13184,4 +13209,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-56ENKU46.js.map
+//# sourceMappingURL=chunk-3LHTFCU2.js.map