@noy-db/hub 0.3.0-pre.11 → 0.3.0-pre.12

package/dist/{chunk-A2QF4JUE.js → chunk-YCXKFB7J.js}

@@ -6,34 +6,34 @@ import {
   SEQUENCE_COLLECTION,
   compileSequenceFormat,
   resolveSequenceKey
-} from "./chunk-5JB73NMC.js";
+} from "./chunk-7QLY64AD.js";
 import {
   loadVaultPolicy
-} from "./chunk-DIRRS7WP.js";
+} from "./chunk-BLUT46UP.js";
 import {
   LinkIntegrityError,
   isLinkCollectionName,
   linkCollectionName,
   linkRowKey
-} from "./chunk-AWB5JZW6.js";
+} from "./chunk-TVS6BUUR.js";
 import {
   hashFields,
   validateSatelliteDeclaration
-} from "./chunk-7ITPJFGC.js";
+} from "./chunk-SIAIYP6G.js";
 import {
   loadFence
-} from "./chunk-Q3XSMOZM.js";
+} from "./chunk-SAL5X5OK.js";
 import {
   InvertedIndex,
   MemoryIndexStore,
   NO_SEARCH,
   VectorSet,
   buildPersistedIndexCallbacks
-} from "./chunk-P5RY4ZWD.js";
+} from "./chunk-BDPAVYGJ.js";
 import {
   derivePersistedSchema,
   isZod4Schema
-} from "./chunk-QLLKLFE2.js";
+} from "./chunk-P2LJI6JE.js";
 import {
   isBaseLive,
   liveBaseIdSet
@@ -42,7 +42,7 @@ import {
   CustodyApi,
   NO_CARGO,
   NO_CUSTODY
-} from "./chunk-BZO4WCJI.js";
+} from "./chunk-UMC5QZTX.js";
 import {
   ServiceBus,
   WriteHookRegistry,
@@ -50,43 +50,44 @@ import {
   assertCanImport,
   canExport,
   canImport
-} from "./chunk-JOQ53DMI.js";
+} from "./chunk-K2DLLK34.js";
 import {
   runDrainBarrier
-} from "./chunk-D26JB3LZ.js";
+} from "./chunk-NAR6IDKH.js";
 import {
   OverlayedCollection
-} from "./chunk-A2Y6YFVN.js";
+} from "./chunk-PN5332SU.js";
 import {
   NO_ATTESTATION
-} from "./chunk-XHV25KBM.js";
+} from "./chunk-S2OWPVSO.js";
 import {
   NO_CLASSIFIED,
   guardClassifiedCompat,
   resolveClassifiedFields
-} from "./chunk-PR5LC5YX.js";
+} from "./chunk-WHQHTNT7.js";
 import {
   NO_TIERS,
   classifySealedShred
-} from "./chunk-H6HM6CVR.js";
+} from "./chunk-AKEOHKMT.js";
 import {
   NO_PORTABILITY
-} from "./chunk-ODJWBC5I.js";
+} from "./chunk-5HNX4OD4.js";
 import {
   PERIODS_COLLECTION,
   PERIOD_ARCHIVES_COLLECTION,
   PERIOD_FREEZES_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION,
   periodExclusiveUpperBound
-} from "./chunk-FXK4X4BL.js";
+} from "./chunk-Y5TWPBNW.js";
 import {
   TxContext,
+  bestEffortRevert,
   revertExecuted
-} from "./chunk-H44ZE4IE.js";
+} from "./chunk-AAIIDAUC.js";
 import {
   DEFAULT_POSTURE,
   ViaGraph
-} from "./chunk-7QIXUSDQ.js";
+} from "./chunk-DJ7MRXNA.js";
 import {
   buildLookupAltIndex,
   buildLookupSnapshotRows,
@@ -102,28 +103,29 @@ import {
   matchesReferencingValue,
   putDerivedOutput,
   registerLookupRefEdges,
+  reservedDictDepsOf,
   resolveDictSource,
   resolveLabelFromMap,
   resolveRollupDeleteIntents,
   runGraphDispatchWave,
   touchFor,
   updateReferencingRecords
-} from "./chunk-DGH65E7Q.js";
+} from "./chunk-R3NHNVS5.js";
 import {
   NO_AGGREGATE,
   Query,
   ScanBuilder
-} from "./chunk-H6CZSDWK.js";
+} from "./chunk-SXPCZ6LL.js";
 import {
   EXPORT_AUDIT_COLLECTION,
   createExportBlobsHandle,
   runCompaction
-} from "./chunk-QYPKGVT4.js";
+} from "./chunk-TBNF5DV5.js";
 import {
   LazyQuery,
   decodeIdxId,
   encodeIdxId
-} from "./chunk-3CNQ7FQ3.js";
+} from "./chunk-6S7ENMRE.js";
 import {
   IMPLICIT_LAZY,
   Lru,
@@ -131,17 +133,17 @@ import {
 } from "./chunk-NO272T7Q.js";
 import {
   canonicalGroupKey
-} from "./chunk-IGJHJYM6.js";
+} from "./chunk-EVHBK7BN.js";
 import {
   readPath
 } from "./chunk-IGJCYUT5.js";
 import {
   resolveManagedSecret,
   saveSealedPassphrase
-} from "./chunk-KPGX66PM.js";
+} from "./chunk-FF7S3XDW.js";
 import {
   dictCollectionName
-} from "./chunk-ELNBMFOS.js";
+} from "./chunk-F44XWXOA.js";
 import {
   NO_I18N,
   getAtPath,
@@ -149,12 +151,12 @@ import {
   isDictKeyDescriptor,
   isI18nTextDescriptor,
   isStaticDictDescriptor
-} from "./chunk-BE7N3AXA.js";
+} from "./chunk-VCUQR6ZL.js";
 import {
   installViaBinder,
   isViaInstalled,
   viaBinder
-} from "./chunk-ARSAMO24.js";
+} from "./chunk-GXLZXD2W.js";
 import {
   NO_TEAM,
   enrollAuthenticator,
@@ -165,7 +167,7 @@ import {
   rotatePassphrase,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "./chunk-IP2QBAGS.js";
+} from "./chunk-3QSOFZQB.js";
 import {
   hasRecoveryEnrolled,
   hasStrongRecoveryEnrolled,
@@ -175,7 +177,7 @@ import {
   mintShamirRecoveryEntry,
   savePaperRecoveryEntries,
   saveShamirRecoveryEntries
-} from "./chunk-6QILBDZU.js";
+} from "./chunk-S7TAPIRS.js";
 import {
   INDEXED_STORE_POLICY
 } from "./chunk-VQNJ7UZL.js";
@@ -191,21 +193,21 @@ import {
   listUsers,
   loadKeyring,
   updateKeyringIdentity
-} from "./chunk-5ZOSG3RJ.js";
+} from "./chunk-CCIR2OJH.js";
 import {
   persistDirectoryConfig,
   readDirectoryConfig
-} from "./chunk-4N5QFSNQ.js";
+} from "./chunk-JGUZMC3I.js";
 import {
   NO_BROKER,
   buildCredentialBrokerHandle
-} from "./chunk-WTUNZACT.js";
+} from "./chunk-HIOLCOK3.js";
 import {
   generateULID
 } from "./chunk-ZJADGNYF.js";
 import {
   sha256Hex
-} from "./chunk-25NDNMQ7.js";
+} from "./chunk-EIZ4YOG2.js";
 import {
   NO_FORGET,
   addSubjectRef,
@@ -214,10 +216,10 @@ import {
   readDottedPath,
   rebuildSubjectIndex,
   removeSubjectRef
-} from "./chunk-DJ3VKYFA.js";
+} from "./chunk-EHW5KTTA.js";
 import {
   NO_SEALED_RECORD
-} from "./chunk-CIKY6I4W.js";
+} from "./chunk-TVOHSPVK.js";
 import {
   RecordCodec,
   SEALED_CEK_NS,
@@ -228,20 +230,20 @@ import {
   queryByDet,
   resolveStableCek,
   validateSchemaInput
-} from "./chunk-QQJXBZCO.js";
+} from "./chunk-HA6ZQWA2.js";
 import {
   buildDeleteMarker,
   buildTombstone,
   isDeleteMarker,
   isTombstone
-} from "./chunk-FQQF23MC.js";
+} from "./chunk-J3JIYFYL.js";
 import {
   encrypt
-} from "./chunk-HUS3J5WM.js";
+} from "./chunk-37WOJQWY.js";
 import {
   NOYDB_FORMAT_VERSION,
   SealedHandle
-} from "./chunk-CKZW6P5V.js";
+} from "./chunk-JC75UBMT.js";
 import {
   AlreadyElevatedError,
   AttestationError,
@@ -279,11 +281,11 @@ import {
   UniqueConstraintError,
   UnsupportedIndexOptionError,
   ValidationError
-} from "./chunk-FH542DDY.js";
+} from "./chunk-FZCGIJEJ.js";
 
 // src/port/by/default-provider.ts
 async function createDefaultCoordinationProvider(store) {
-  const { StoreCoordinationProvider } = await import("./store-coordination-provider-HPYVFJCV.js");
+  const { StoreCoordinationProvider } = await import("./store-coordination-provider-5KDS2RRP.js");
   return new StoreCoordinationProvider(store);
 }
 
@@ -1468,7 +1470,7 @@ async function resolveStaleOnRead(accessor, outputCollection, id) {
     }
     const sourceWithId = { ...source, id };
     if (DerivationExecutor === null) {
-      ({ DerivationExecutor } = await import("./executor-XXGS4S3K.js"));
+      ({ DerivationExecutor } = await import("./executor-JFVAJY42.js"));
     }
     const ctx = { vault: accessor.getReadOnlyFacade() };
     const result = await DerivationExecutor.run(spec, sourceWithId, 0, strategyHash, ctx);
@@ -2007,6 +2009,7 @@ function resolveCollectionConfig(opts) {
     reconcileOnOpen: opts.reconcileOnOpen ?? "off",
     getDEK: opts.getDEK,
     onDirty: opts.onDirty,
+    tabCoordinated: opts.tabCoordinated,
     historyConfig: opts.historyConfig ?? { enabled: true },
     historyConfigExplicit: opts.historyConfigExplicit ?? false,
     schema: opts.schema,
@@ -2069,7 +2072,7 @@ function resolveCollectionConfig(opts) {
 // src/with-formula/computed/lazy.ts
 var fn = null;
 async function loadEvalComputedFields() {
-  fn ??= (await import("./computed-W6MVAMWZ.js")).evalComputedFields;
+  fn ??= (await import("./computed-ORCGM5JE.js")).evalComputedFields;
   return fn;
 }
 
@@ -2108,6 +2111,8 @@ var Collection = class {
   activeTxId;
   getDEK;
   onDirty;
+  /** #693: live check — true when multi-tab write-propagation is active; gates the #606 marker-id-set fallback read. */
+  tabCoordinated;
   historyConfig;
   /** True when the caller explicitly provided a `historyConfig` option (vs. inheriting the vault default). */
   historyConfigExplicit;
@@ -2134,6 +2139,20 @@ var Collection = class {
   // doesn't need a runtime branch on every cache access.
   cache = /* @__PURE__ */ new Map();
   hydrated = false;
+  /**
+   * #606: ids known to carry a delete marker in the store — lets the #589
+   * re-create version-continuity gate in `_putInternal` read the store ONLY
+   * for a known marker prior, instead of unconditionally on every insert.
+   * Populated on hydration (`ensureHydrated`/`hydrateFromSnapshot`), local
+   * delete (`_doDelete`), and the sync/tab/cutover choke point
+   * (`_invalidateCacheEntry`). Accepted drift: `vault._purgeDeleteMarkers`/
+   * `_purgeMarkersOn` remove markers directly on the raw store, bypassing
+   * Collection, so this set can hold stale ids after a purge on an
+   * already-loaded collection — perf-only and self-healing (a stale id just
+   * costs one `adapter.get` that returns non-marker/null, and version
+   * resolution falls back to 1 correctly). Do not try to wire purge into it.
+   */
+  markerIds = /* @__PURE__ */ new Set();
   /**
    * Lazy mode flag. `true` when constructed with `prefetch: false`.
    * In lazy mode the cache is bounded by an LRU and `list()`/`query()`
@@ -2162,8 +2181,7 @@ var Collection = class {
   indexState;
   /**
    * In-memory unique-constraint enforcement for eager mode.
-   * `null` when no `unique:true` indexes are declared on this collection,
-   * or when the collection is in lazy mode (which throws at registration).
+   * `null` when no `unique:true` indexes are declared on this collection, or when the collection is in lazy mode (which throws at registration).
    */
   uniqueConstraints;
   /**
@@ -2184,8 +2202,7 @@ var Collection = class {
     return this.indexState.getEagerIndexes();
   }
   /**
-   * Accessor for the persisted-mirror (lazy-mode) index. Returns `null`
-   * when indexing is disabled or the collection is in eager mode.
+   * Accessor for the persisted-mirror (lazy-mode) index. Returns `null` when indexing is disabled or the collection is in eager mode.
    */
   get persistedIndexes() {
     return this.indexState.getPersistedIndexes();
@@ -2453,6 +2470,7 @@ var Collection = class {
     this.reconcileOnOpen = cfg.reconcileOnOpen;
     this.getDEK = cfg.getDEK;
     this.onDirty = cfg.onDirty;
+    this.tabCoordinated = cfg.tabCoordinated;
     this.historyConfig = cfg.historyConfig;
     this.historyConfigExplicit = cfg.historyConfigExplicit;
     this.schema = cfg.schema;
@@ -2611,6 +2629,7 @@ var Collection = class {
       lazy: this.lazy
     });
     this.indexes?.setCanonicalizer((f, v) => this.via?.canonicalizeIndexKey(f, v));
+    this.persistedIndexes?.setCanonicalizer((f, v) => this.via?.canonicalizeIndexKey(f, v));
     this.uniqueConstraints = buildUniqueConstraintSet(this.name, opts.indexes, {
       lazy: this.lazy,
       crdt: this.crdtMode != null,
@@ -2856,7 +2875,7 @@ var Collection = class {
     }
     await this.onAccess?.("find", "*");
     if (hits.length === 0) return [];
-    const { verifyDigestField } = await import("./verify-66RHOW7N.js");
+    const { verifyDigestField } = await import("./verify-QK76NJ4G.js");
     const policy = {
       normalize: spec.verifyNormalize ?? "password",
       notLastN: spec.notLastN ?? 0,
@@ -2956,6 +2975,7 @@ var Collection = class {
     const virtualMoney = resolveVirtualMoneyFields(Object.keys(moneyFields), (f) => this.via?.bindings.find((b) => b.brand === "computed")?.covers?.(f) ?? false);
     this.via = ViaPipeline.build([viaBinder("money")({ moneyFields, ...virtualMoney.size > 0 ? { virtualMoneyFields: virtualMoney } : {} }), ...this.via?.bindings ?? []], this.via?.taint);
     this.moneyFields = moneyFields;
+    if (this.hydrated) this.rebuildEagerIndexesFromCache();
   }
   /** @internal — attach computed fields post-construction. See {@link _applyMoneyFields}. */
   _applyComputed(computed) {
@@ -3040,6 +3060,20 @@ var Collection = class {
    *          `null` if not found.
    */
   async get(id, locale) {
+    const record = await this.#getRaw(id);
+    if (record === null) return null;
+    return this.applyLocaleToRecord(record, locale);
+  }
+  /**
+   * Raw fetch: cache/adapter → decrypt → tombstone-null, WITHOUT `present()`.
+   * Split out of `get()` (#684) so `lazyQuery()`'s `LazyQuerySource` can hand
+   * `LazyQuery`'s post-filter the RAW (stored-form) record a `clause.via`
+   * evaluator (e.g. money) needs — `present()`/locale decode is applied only
+   * to survivors, via `applyLocaleToRecord` (see `lazyQuery()` below). `get()`
+   * itself is unchanged: raw fetch, then `applyLocaleToRecord`, same order
+   * as before this split.
+   */
+  async #getRaw(id) {
     if (this.derivationSource !== void 0) {
       const registry = this.derivationSource.registry();
       if (registry.strategiesProducingOutput(this.name).length > 0) {
@@ -3047,7 +3081,7 @@ var Collection = class {
       }
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-NXPT56JA.js");
+      const { resolveStaleMVOnRead } = await import("./stale-TJXFQKOJ.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name, this.#dispatchCtx({ collection: this.name, id: "resolve-on-read" }));
     }
     let record;
@@ -3070,7 +3104,7 @@ var Collection = class {
     }
     if (record === null) return null;
     await this.onAccess?.("get", id);
-    return this.applyLocaleToRecord(record, locale);
+    return record;
   }
   /**
    * Return the raw CRDT state for a record.
@@ -3443,7 +3477,9 @@ var Collection = class {
     }
     let version = existing ? existing.version + 1 : 1;
     if (!existing && this.onDirty) {
-      if (priorRaw === null) priorRaw = await this.adapter.get(this.vault, this.name, id);
+      if (priorRaw === null && (this.markerIds.has(id) || this.tabCoordinated?.())) {
+        priorRaw = await this.adapter.get(this.vault, this.name, id);
+      }
       if (priorRaw && isDeleteMarker(priorRaw)) version = priorRaw._v + 1;
     }
     this.uniqueConstraints?.check(id, record);
@@ -3466,6 +3502,7 @@ var Collection = class {
     }
     const envelope = await this.codec.encryptRecord(record, version, cek, options?.source, options?.sourceTs, vdigCtx, id);
     await this.adapter.put(this.vault, this.name, id, envelope);
+    this.markerIds.delete(id);
     await this._ensureClassifiedMarker();
     if (this.embeddings) {
       await this.searchStrategy.embedOnWrite(this.searchContext(), id, record, version);
@@ -3523,7 +3560,7 @@ var Collection = class {
         if (wave?.seen(`mv\0${reg.spec.name}`)) continue;
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-GTVSUUBX.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-6OCCE5VM.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -3533,7 +3570,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-NXPT56JA.js");
+          staleHelpers = await import("./stale-TJXFQKOJ.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -3737,7 +3774,7 @@ var Collection = class {
         continue;
       }
       if (DerivationExecutor === null) {
-        ({ DerivationExecutor } = await import("./executor-XXGS4S3K.js"));
+        ({ DerivationExecutor } = await import("./executor-JFVAJY42.js"));
       }
       for (const run of runs) {
         const ctx = { vault: this.derivationSource.getReadOnlyFacade() };
@@ -3757,7 +3794,7 @@ var Collection = class {
           const outputCollection = this.derivationSource.getCollection(outSpec.collection);
           const txCtx = this.derivationSource.getActiveTxContext();
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-CKYFH33E.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-IO2KDUWV.js");
             const prior = await loadFanoutSidecar(this.adapter, this.vault, spec.source, run.runId, key, this.getDEK, this.storeCiphertext);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -4012,6 +4049,7 @@ var Collection = class {
       if (!live || isTombstone(live, this.storeCiphertext) || isDeleteMarker(live)) return;
       markerVersion = live._v + 1;
       await this.adapter.put(this.vault, this.name, id, buildDeleteMarker(markerVersion, this.keyring.userId));
+      this.markerIds.add(id);
     } else {
       await this.adapter.delete(this.vault, this.name, id);
     }
@@ -4116,7 +4154,7 @@ var Collection = class {
           continue;
         }
         if (helpers === null) {
-          helpers = await import("./fanout-sidecar-CKYFH33E.js");
+          helpers = await import("./fanout-sidecar-IO2KDUWV.js");
         }
         const sidecar = await helpers.loadFanoutSidecar(this.adapter, this.vault, spec.source, id, outputKey, this.getDEK, this.storeCiphertext);
         if (!sidecar) continue;
@@ -4149,7 +4187,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-GTVSUUBX.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-6OCCE5VM.js"));
         }
         deleted += (await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -4159,7 +4197,7 @@ var Collection = class {
         })).deleted;
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-NXPT56JA.js");
+          staleHelpers = await import("./stale-TJXFQKOJ.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -4183,7 +4221,7 @@ var Collection = class {
       );
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-NXPT56JA.js");
+      const { resolveStaleMVOnRead } = await import("./stale-TJXFQKOJ.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name, this.#dispatchCtx({ collection: this.name, id: "resolve-on-read" }));
     }
     await this.ensureHydrated();
@@ -4821,9 +4859,11 @@ var Collection = class {
       this.lru.remove(id);
       return;
     }
+    const envelope = await this.adapter.get(this.vault, this.name, id);
+    if (envelope && isDeleteMarker(envelope)) this.markerIds.add(id);
+    else this.markerIds.delete(id);
     if (!this.hydrated) return;
     const previous = this.cache.get(id);
-    const envelope = await this.adapter.get(this.vault, this.name, id);
     if (!envelope) {
       this.cache.delete(id);
       if (previous) {
@@ -4872,6 +4912,10 @@ var Collection = class {
    * @internal
    */
   async _onRecordMutated(id, action, origin, ctx) {
+    if (this.onDirty && !this.lazy) {
+      if (action === "delete") this.markerIds.add(id);
+      else this.markerIds.delete(id);
+    }
     switch (origin) {
       case "local-write": {
         const record = ctx.record;
@@ -4927,6 +4971,8 @@ var Collection = class {
         const record = await this.codec.decryptRecord(envelope, { id, sealedAsHandles: true });
         if (record === null) continue;
         this.cache.set(id, { record, version: envelope._v });
+      } else if (envelope && isDeleteMarker(envelope)) {
+        this.markerIds.add(id);
       }
     }
     this.hydrated = true;
@@ -4936,7 +4982,11 @@ var Collection = class {
   /** Hydrate from a pre-loaded snapshot (used by Vault). */
   async hydrateFromSnapshot(records) {
     for (const [id, envelope] of Object.entries(records)) {
-      if (isTombstone(envelope, this.storeCiphertext) || isDeleteMarker(envelope)) continue;
+      if (isDeleteMarker(envelope)) {
+        this.markerIds.add(id);
+        continue;
+      }
+      if (isTombstone(envelope, this.storeCiphertext)) continue;
       const record = await this.codec.decryptRecord(envelope, { id, sealedAsHandles: true });
       if (record === null) continue;
       this.cache.set(id, { record, version: envelope._v });
@@ -5290,8 +5340,13 @@ var Collection = class {
     const source = {
       collectionName: this.name,
       persistedIndexes: persisted,
+      canonicalizeIndexKey: (f, v) => this.via?.canonicalizeIndexKey(f, v),
       ensurePersistedIndexesLoaded: () => this.ensurePersistedIndexesLoaded(),
-      getRecord: (id) => this.get(id)
+      // #684: raw-fetch seam — post-filter runs against the RAW record;
+      // only survivors are decoded via `decodeRecord` below.
+      getRawRecord: (id) => this.#getRaw(id),
+      decodeRecord: (record) => this.applyLocaleToRecord(record, void 0),
+      via: () => this.via
     };
     return new LazyQuery(source);
   }
@@ -5313,14 +5368,14 @@ var Collection = class {
   /** C-A/R10: persist the classified marker once per classified handle (store I/O in config-drift.ts). */
   async _ensureClassifiedMarker() {
     if (this._markerPersisted || this.vdigFields === null) return;
-    const { persistClassifiedMarkerForFields } = await import("./classified-marker-LQWWQNIJ.js");
+    const { persistClassifiedMarkerForFields } = await import("./classified-marker-M7K3OJPM.js");
     await persistClassifiedMarkerForFields(this.adapter, this.vault, this.name, this.vdigFields, await this.getDEK(this.name));
     this._markerPersisted = true;
   }
   /** C-A/R10 drift signal — the marker's declared digest-only set, memoized to one store read per handle (see config-drift.ts). */
   async _classifiedMarkerDigestOnly() {
     if (this._markerDigestOnlyCache !== void 0) return this._markerDigestOnlyCache;
-    const { readClassifiedMarkerDigestOnly } = await import("./classified-marker-LQWWQNIJ.js");
+    const { readClassifiedMarkerDigestOnly } = await import("./classified-marker-M7K3OJPM.js");
     this._markerDigestOnlyCache = await readClassifiedMarkerDigestOnly(this.adapter, this.vault, this.name, await this.getDEK(this.name));
     return this._markerDigestOnlyCache;
   }
@@ -6718,7 +6773,7 @@ var VaultLinks = class {
 // src/with-shape/links/lazy-handle.ts
 function makeLazyLinkSetHandle(d) {
   let engine = null;
-  const load = () => engine ??= import("./link-set-MNADSH5M.js").then(
+  const load = () => engine ??= import("./link-set-DGYUOFVD.js").then(
     ({ LinkSet }) => new LinkSet(d.adapter, d.vault, d.name, d.spec, d.encrypted, d.getDEK, d.actor, d.emitter, d.endpointExists)
   );
   return {
@@ -7155,7 +7210,7 @@ var SatelliteRegistry = class {
   locks = /* @__PURE__ */ new Map();
   register(spec) {
     if (this.byBase.has(spec.base)) {
-      throw new SatelliteConfigError(`R-S1: base "${spec.base}" already has satellite "${this.byBase.get(spec.base).satellite}" \u2014 v1 allows exactly one satellite per base.`);
+      throw new SatelliteConfigError(`R-S10: base "${spec.base}" already has satellite "${this.byBase.get(spec.base).satellite}" \u2014 v1 allows exactly one satellite per base.`);
     }
     if (this.byBase.has(spec.satellite)) {
       throw new SatelliteConfigError(`R-S3: "${spec.satellite}" is itself registered as a base (of "${this.byBase.get(spec.satellite).satellite}") \u2014 no satellite-of-satellite chains.`);
@@ -7256,7 +7311,7 @@ function declareSatellite(ctx, collectionName, options, existingRegistry) {
   ctx.forEachSyncEngine((e) => e.remirrorPairResolvers([spec.base, spec.satellite]));
   const registry = reg;
   const baseSchema = ctx.getBaseSchema(spec.base);
-  void import("./post-register-HAWO3O7O.js").then((m) => m.postRegister(ctx.adapter, ctx.vaultName, spec, ctx.getDEK, baseSchema, registry)).catch(() => {
+  void import("./post-register-LB3P4XQU.js").then((m) => m.postRegister(ctx.adapter, ctx.vaultName, spec, ctx.getDEK, baseSchema, registry)).catch(() => {
   });
   return reg;
 }
@@ -7269,14 +7324,9 @@ function unwrap(handle) {
   return handle[RAW_TARGET] ?? handle;
 }
 async function revertAndCompensate(deps, executed) {
-  for (const leg of [...executed].reverse()) {
-    try {
-      if (leg.prior !== null) await deps.adapter.put(deps.vaultName, leg.coll, leg.id, leg.prior);
-      else await deps.adapter.delete(deps.vaultName, leg.coll, leg.id);
-      await leg.handle._compensateRevertedWrite(leg.id);
-    } catch {
-    }
-  }
+  await bestEffortRevert(executed, deps.adapter, async (leg) => {
+    if (leg.wrote) await leg.handle._compensateRevertedWrite(leg.id);
+  });
 }
 async function joinedPut(deps, id, record) {
   deps.registry.assertNotPoisoned(deps.spec.satellite);
@@ -7291,8 +7341,17 @@ async function joinedPut(deps, id, record) {
   return deps.registry.withPairLock(deps.spec.base, async () => {
     const executed = [];
     const run = async (handle, coll, rec) => {
-      executed.push({ coll, id, prior: await deps.adapter.get(deps.vaultName, coll, id), handle });
+      const leg = {
+        vaultName: deps.vaultName,
+        collectionName: coll,
+        id,
+        prior: await deps.adapter.get(deps.vaultName, coll, id),
+        handle,
+        wrote: false
+      };
+      executed.push(leg);
       await handle.put(id, rec);
+      leg.wrote = true;
     };
     try {
       await run(base, deps.spec.base, baseRec);
@@ -7309,8 +7368,17 @@ async function pairDelete(deps, id) {
   return deps.registry.withPairLock(deps.spec.base, async () => {
     const executed = [];
     const run = async (handle, coll) => {
-      executed.push({ coll, id, prior: await deps.adapter.get(deps.vaultName, coll, id), handle });
+      const leg = {
+        vaultName: deps.vaultName,
+        collectionName: coll,
+        id,
+        prior: await deps.adapter.get(deps.vaultName, coll, id),
+        handle,
+        wrote: false
+      };
+      executed.push(leg);
       await handle.delete(id);
+      leg.wrote = true;
     };
     try {
       await run(satellite, deps.spec.satellite);
@@ -7563,6 +7631,17 @@ function expandRefsWithSatellites(refs, registry) {
   return anySat ? out : refs;
 }
 
+// src/with-shape/satellites/migrate-cek.ts
+async function migrateSatelliteCek(name, coll) {
+  if (coll.getConfig()?.perRecordKeys !== true) {
+    throw new SatelliteConfigError(
+      `migrateSatellitePerRecordKeys: collection "${name}" was already opened this session without perRecordKeys (construction-only); migrate before its first open, or restart the session.`
+    );
+  }
+  const migrated = await coll._applyCutoverTransform((doc) => doc);
+  return { migrated };
+}
+
 // src/with-shape/schema-update/gate.ts
 var SchemaUpdateGate = class {
   #decision;
@@ -8226,7 +8305,7 @@ var Vault = class {
         const strategies = options.schemaUpdate ?? [];
         const work = (async () => {
           const dek = await this.getDEK(collectionName);
-          const { persistSchemaIfNeeded } = await import("./register-VCKOBWKT.js");
+          const { persistSchemaIfNeeded } = await import("./register-ZI7YI7US.js");
           const result = await persistSchemaIfNeeded({
             store: this.adapter,
             vault: this.name,
@@ -8263,6 +8342,8 @@ var Vault = class {
         schemaFence: this.schemaFence,
         getDEK: this.getDEK,
         onDirty: this.onDirty,
+        tabCoordinated: () => this.noydb._tabCoordinationActive,
+        // #693: re-create gate fallback
         historyConfig: effectiveHistoryConfig,
         historyConfigExplicit: options?.historyConfig !== void 0,
         // thread the vault-wide blob strategy into every
@@ -8420,7 +8501,7 @@ var Vault = class {
         const work = (async () => {
           try {
             const dek = await this.getDEK(collectionName);
-            await (await import("./register-VCKOBWKT.js")).persistSchemaIfNeeded({
+            await (await import("./register-ZI7YI7US.js")).persistSchemaIfNeeded({
               store: this.adapter,
               vault: this.name,
               collectionName,
@@ -8457,6 +8538,16 @@ var Vault = class {
       registry: this.satelliteRegistry
     });
   }
+  /**
+   * Migrate an existing satellite's records onto per-record CEKs (#599) —
+   * unblocks R-S7 when a base gains forget coverage after its satellite was
+   * already declared without `perRecordKeys`. Call BEFORE re-declaring with
+   * `{ satelliteOf, perRecordKeys: true }` AND before this collection serves
+   * writes (unfenced walk — see {@link migrateSatelliteCek}); resumable.
+   */
+  async migrateSatellitePerRecordKeys(satelliteName) {
+    return migrateSatelliteCek(satelliteName, this.collection(satelliteName, { perRecordKeys: true }));
+  }
   /**
    * Await all background persisted-schema writes triggered by
    * `collection({ persistJsonSchema: true })` calls on this vault.
@@ -8517,6 +8608,12 @@ var Vault = class {
   _reservedLookupCollectionNames() {
     return [...this.reservedLookupCollections.keys()];
   }
+  /** @internal #653 — one-hop reserved-dict deps of `names`, for `SyncEngine`'s partial-sync
+   *  filter expansion. Provably complete at one hop: `vault.collection()` refuses `_dict_*`
+   *  names, so a dict can never itself declare lookup fields (no dict-of-dict chain). */
+  _reservedDictDepsOf(names) {
+    return reservedDictDepsOf(names, this.dictKeyFieldRegistry);
+  }
   /** @internal #638 Task 4 — open a graph-dispatch touch batch (sync pull()/push()/cutover). */
   _beginGraphBatch() {
     this._graphBatch = /* @__PURE__ */ new Map();
@@ -9572,7 +9669,7 @@ var Vault = class {
   async _initDerivations(handles) {
     if (handles.length === 0) return;
     const [{ DerivationRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-BZFLJNEH.js"),
+      import("./registry-NVWEQ2GU.js"),
       import("./read-only-facade-CHCKSEPD.js")
     ]);
     const registry = new DerivationRegistry();
@@ -9604,7 +9701,7 @@ var Vault = class {
    */
   async _initMaterializedViews(handles) {
     if (handles.length === 0) return;
-    const { MaterializedViewRegistry } = await import("./registry-YJEYSYI5.js");
+    const { MaterializedViewRegistry } = await import("./registry-SEKL74ET.js");
     const registry = new MaterializedViewRegistry();
     this.materializedViewRegistry = registry;
     const db = this;
@@ -9629,7 +9726,7 @@ var Vault = class {
    */
   async _initOverlayedViews(handles) {
     if (handles.length === 0) return;
-    const { OverlayedViewRegistry } = await import("./registry-72UKJ2L4.js");
+    const { OverlayedViewRegistry } = await import("./registry-DZ2T4LL7.js");
     const registry = new OverlayedViewRegistry();
     const mvRegistry = this.materializedViewRegistry;
     const overlayNames = /* @__PURE__ */ new Set();
@@ -9676,14 +9773,14 @@ var Vault = class {
     if (!reg) {
       throw new Error(`refreshView: no MV registered with name "${name}"`);
     }
-    const { MaterializedViewExecutor } = await import("./executor-GTVSUUBX.js");
+    const { MaterializedViewExecutor } = await import("./executor-6OCCE5VM.js");
     const result = await MaterializedViewExecutor.refresh(reg, {
       getCollection: (n) => this.collection(n),
       getActiveTxContext: () => this.noydb._activeTxContextOrNull,
       getQueryContext: () => this,
       dispatchCtx: this._dispatchCtx({ collection: name, id: "refreshView" })
     });
-    const { clearMVStale } = await import("./stale-NXPT56JA.js");
+    const { clearMVStale } = await import("./stale-TJXFQKOJ.js");
     clearMVStale(registry, name);
     return result;
   }
@@ -9696,7 +9793,7 @@ var Vault = class {
     if (registry === null) return { derived: 0, failed: 0, skippedFrozen: 0 };
     const strategies = registry.strategiesForSource(sourceCollection);
     if (strategies.length === 0) return { derived: 0, failed: 0, skippedFrozen: 0 };
-    const { DerivationExecutor } = await import("./executor-XXGS4S3K.js");
+    const { DerivationExecutor } = await import("./executor-JFVAJY42.js");
     const sourceColl = this.collection(sourceCollection);
     const records = await sourceColl.list();
     const ctx = { vault: this.derivationFacade ?? new (await import("./read-only-facade-CHCKSEPD.js")).ReadOnlyVaultFacade(this, "derivation") };
@@ -9723,7 +9820,7 @@ var Vault = class {
           if (!outSpec) continue;
           const outputColl = this.collection(outSpec.collection);
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-CKYFH33E.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-IO2KDUWV.js");
             const prior = await loadFanoutSidecar(this.adapter, this.name, spec.source, id, key, this.getDEK, this.encrypted);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -9950,7 +10047,7 @@ var Vault = class {
    * collection.
    */
   async delegate(opts) {
-    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-OPUU3R2E.js");
+    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-YVSHMIZZ.js");
     if (!this.keyring.kek) {
       throw new ValidationError(
         "issueDelegation: keyring.kek is null \u2014 issuing a delegation requires a tier-1 unlock. Re-authenticate at tier 1 (passphrase) first."
@@ -9972,7 +10069,7 @@ var Vault = class {
    * if the id does not exist.
    */
   async revokeDelegation(id) {
-    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-OPUU3R2E.js");
+    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-YVSHMIZZ.js");
     await revokeDelegation(this.adapter, this.name, id);
     void DELEGATIONS_COLLECTION;
   }
@@ -10220,7 +10317,7 @@ var Vault = class {
    * @see docs/superpowers/specs/2026-05-22-schema-dump-design.md
    */
   async dumpSchema(opts = {}) {
-    const { dumpVaultSchema } = await import("./walk-2RWEOCAS.js");
+    const { dumpVaultSchema } = await import("./walk-XQCBKSBW.js");
     return dumpVaultSchema(this, opts);
   }
   /**
@@ -10355,7 +10452,7 @@ var Vault = class {
    * @see https://github.com/vLannaAi/noy-db-docs/blob/main/content/docs/services/public-envelope.md
    */
   async getPublicEnvelope(opts = {}) {
-    const { readPublicEnvelope } = await import("./public-envelope-NJVB7LPA.js");
+    const { readPublicEnvelope } = await import("./public-envelope-GOG4LUM7.js");
     return readPublicEnvelope(this.adapter, this.name, opts);
   }
   /**
@@ -10370,7 +10467,7 @@ var Vault = class {
    * both modes round-trip cleanly.
    */
   async dump() {
-    const { dumpVault } = await import("./backup-XA5STIYQ.js");
+    const { dumpVault } = await import("./backup-2WVBIVXW.js");
     return dumpVault(this.backupContext());
   }
   /**
@@ -10422,7 +10519,7 @@ var Vault = class {
    * — there's no chain to verify against.
    */
   async load(backupJson) {
-    const { loadVault } = await import("./backup-XA5STIYQ.js");
+    const { loadVault } = await import("./backup-2WVBIVXW.js");
     return loadVault(this.backupContext(), backupJson);
   }
   /**
@@ -10454,7 +10551,7 @@ var Vault = class {
    * way to detect tampering of an in-place vault.
    */
   async verifyBackupIntegrity() {
-    const { verifyBackupIntegrity } = await import("./backup-XA5STIYQ.js");
+    const { verifyBackupIntegrity } = await import("./backup-2WVBIVXW.js");
     return verifyBackupIntegrity(this.backupContext());
   }
   /**
@@ -10672,7 +10769,7 @@ var Vault = class {
    * is the live validator object, not a serialization of it).
    */
   async exportJSON(opts = {}) {
-    const { exportVaultJSON } = await import("./backup-XA5STIYQ.js");
+    const { exportVaultJSON } = await import("./backup-2WVBIVXW.js");
     return exportVaultJSON(this.backupContext(), opts);
   }
 };
@@ -12543,7 +12640,7 @@ var Noydb = class {
       if (!facade) return;
       const ctx = { existing, vault: facade, userId: e.userId, role: e.role };
       await registry.runChecks(e.collection, incoming, ctx);
-      const { GuardExecutor } = await import("./executor-GZWMTOXB.js");
+      const { GuardExecutor } = await import("./executor-UPSH5O3F.js");
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, e.docId, existing, incoming, e.computedFieldNames);
       }
@@ -12765,6 +12862,7 @@ var Noydb = class {
       engine.setCacheInvalidator((collection, id, action) => comp._invalidateSyncApplied(collection, id, action));
       engine.setGraphBatchController({ begin: () => comp._beginGraphBatch(), flush: () => comp._flushGraphBatch() });
       engine.setReservedLookupSource({ collections: () => comp._reservedLookupCollectionNames() });
+      engine.setReservedDictExpander((names) => comp._reservedDictDepsOf(names));
     });
     await comp._initGuards(this.options.guardStrategies ?? []);
     await comp._initDerivations(this.options.derivationStrategies ?? []);
@@ -13539,6 +13637,16 @@ var Noydb = class {
   get coordination() {
     return this.coordinationProvider;
   }
+  /**
+   * #693: true when multi-tab coordination is active at all — presence/election
+   * alone (`propagateWrites: false`) or full write-propagation — a peer tab can
+   * write this instance's shared store out-of-band either way, so per-collection
+   * marker-id sets are not authoritative and the re-create gate must fall back to
+   * a store read. Live (tab coordination is enable/disable-able at runtime).
+   */
+  get _tabCoordinationActive() {
+    return this.tabCoordinator !== void 0;
+  }
   /**
    * Soft-lock a single vault: clear its in-memory keyring, DEKs, vault
    * instance, sync engine, policy enforcer, and active-tier entry —
@@ -13811,7 +13919,7 @@ var Noydb = class {
         "setPublicEnvelope: the public-envelope feature is not enabled. Pass `publicEnvelope: true` (or a schema object) to `createNoydb`."
       );
     }
-    const { loadPublicEnvelope, savePublicEnvelope, resolveSchema, validatePublicEnvelopeInput } = await import("./public-envelope-NJVB7LPA.js");
+    const { loadPublicEnvelope, savePublicEnvelope, resolveSchema, validatePublicEnvelopeInput } = await import("./public-envelope-GOG4LUM7.js");
     const schema = resolveSchema(this.options.publicEnvelope);
     validatePublicEnvelopeInput(input, schema);
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -13840,7 +13948,7 @@ var Noydb = class {
    * regardless).
    */
   async getPublicEnvelope(vault, opts = {}) {
-    const { readPublicEnvelope } = await import("./public-envelope-NJVB7LPA.js");
+    const { readPublicEnvelope } = await import("./public-envelope-GOG4LUM7.js");
     return readPublicEnvelope(this.options.store, vault, opts);
   }
   // ─── Auth introspection ─────────────────────────────────────────
@@ -14031,9 +14139,9 @@ async function createNoydb(options) {
     throw new ValidationError("A secret (passphrase) or getKeyring callback is required when encryption is enabled");
   }
   if (!options.coordinationStrategy) options = { ...options, coordinationStrategy: await createDefaultCoordinationProvider(options.store) };
-  if (!options.userApiFactory) options = { ...options, userApiFactory: (await import("./api-YGMINAET.js")).createUserApi };
+  if (!options.userApiFactory) options = { ...options, userApiFactory: (await import("./api-3TH2GOFQ.js")).createUserApi };
   if (!options.policyFactory) {
-    const policyModule = await import("./policy-JTFOPPUU.js");
+    const policyModule = await import("./policy-5POYLI26.js");
     options = { ...options, policyFactory: policyModule.createNoydbPolicy, policyCheckGateFn: policyModule.checkGate };
   }
   return new Noydb(options);
@@ -14070,4 +14178,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-A2QF4JUE.js.map
+//# sourceMappingURL=chunk-YCXKFB7J.js.map