@noy-db/hub 0.6.0-pre.21 → 0.6.0-pre.23

package/dist/{chunk-LGFTOU27.js → chunk-ZILONQGE.js}

@@ -4,14 +4,14 @@ import {
   isLinkCollectionName,
   linkCollectionName,
   linkRowKey
-} from "./chunk-NR2SUJ3H.js";
+} from "./chunk-B3X6S37C.js";
 import {
   hashFields,
   validateSatelliteDeclaration
-} from "./chunk-D3R7Q4QK.js";
+} from "./chunk-CJU3KXHJ.js";
 import {
   resolveStaleOnRead
-} from "./chunk-INMHEMXX.js";
+} from "./chunk-C7B3XUI4.js";
 import {
   isManifestReservedCollection
 } from "./chunk-EPFF7LOX.js";
@@ -20,7 +20,7 @@ import {
   buildPersistedIndexCallbacks,
   encodeVecId,
   syncTierSearch
-} from "./chunk-O742QBZZ.js";
+} from "./chunk-DZBZCFS7.js";
 import {
   isBaseLive,
   liveBaseIdSet
@@ -35,50 +35,50 @@ import {
 import {
   derivePersistedSchema,
   isZod4Schema
-} from "./chunk-ONVD6GBY.js";
+} from "./chunk-2QN6NPV6.js";
 import {
   SchemaUpdateGate
 } from "./chunk-6LJY7X5A.js";
 import {
   NO_ATTESTATION
-} from "./chunk-HR5R5JOM.js";
+} from "./chunk-D5DZ4R7X.js";
 import {
   NO_CLASSIFIED,
   guardClassifiedCompat,
   resolveClassifiedFields
-} from "./chunk-OMYCSTXL.js";
+} from "./chunk-ZLU3IWHK.js";
 import {
   NO_TIERS,
   classifySealedShred,
   syncDerivedOutputs
-} from "./chunk-4YL2LMXK.js";
+} from "./chunk-UW5YKCE4.js";
 import {
   NO_PORTABILITY
-} from "./chunk-ZZXLB6AS.js";
+} from "./chunk-R6BGN6IY.js";
 import {
   NO_CARGO,
   runDrainBarrier
-} from "./chunk-FS7NTGCJ.js";
+} from "./chunk-WBFJZCDJ.js";
 import {
   saveSealedSecret
 } from "./chunk-OTHHO3KI.js";
 import {
   loadPersistedSchema
-} from "./chunk-6WO62AJW.js";
+} from "./chunk-SZFNO7L4.js";
 import {
   NO_SEQUENCE,
   SEQUENCE_COLLECTION,
   compileSequenceFormat,
   resolveSequenceKey
-} from "./chunk-YALD3SST.js";
+} from "./chunk-G4577GK7.js";
 import {
   CustodyApi,
   NO_CUSTODY
-} from "./chunk-AUPSEJ7O.js";
+} from "./chunk-WG66ZPEV.js";
 import {
   DEFAULT_POSTURE,
   ViaGraph
-} from "./chunk-RSXQNFGO.js";
+} from "./chunk-ATSIGJRX.js";
 import {
   buildLookupAltIndex,
   buildLookupSnapshotRows,
@@ -102,10 +102,10 @@ import {
   selfWriteFieldEqual,
   touchFor,
   updateReferencingRecords
-} from "./chunk-DVRZYAGT.js";
+} from "./chunk-6ZN6X2LW.js";
 import {
   OverlayedCollection
-} from "./chunk-32B7VCKU.js";
+} from "./chunk-O2A5YCFF.js";
 import {
   INDEXED_STORE_POLICY,
   NO_SYNC
@@ -120,7 +120,7 @@ import {
   resolvePeriodKey,
   resolveReopenState,
   samePartition
-} from "./chunk-RFO4UXKQ.js";
+} from "./chunk-CWYTN4IK.js";
 import {
   PERIODS_COLLECTION,
   PERIOD_ARCHIVES_COLLECTION,
@@ -128,7 +128,7 @@ import {
   PERIOD_REOPENS_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION,
   periodExclusiveUpperBound
-} from "./chunk-A4TOGAUW.js";
+} from "./chunk-VXH5Z22C.js";
 import {
   NO_SHADOW
 } from "./chunk-SMY5X46Z.js";
@@ -138,7 +138,7 @@ import {
 import {
   TxContext,
   bestEffortRevert
-} from "./chunk-2LFOMUEA.js";
+} from "./chunk-LBDG6FHB.js";
 import {
   lazy
 } from "./chunk-5D2ALSM5.js";
@@ -146,29 +146,29 @@ import {
   InvertedIndex,
   MemoryIndexStore,
   NO_SEARCH
-} from "./chunk-GTHVPVAR.js";
+} from "./chunk-VNPSPQNN.js";
 import {
   NO_SEALED_RECORD
-} from "./chunk-4RAS6HN6.js";
+} from "./chunk-WBRLSPA7.js";
 import {
   Query,
   ScanBuilder
-} from "./chunk-P2MR5UNE.js";
+} from "./chunk-DRVF2YS5.js";
 import {
   EXPORT_AUDIT_COLLECTION,
   NO_BLOBS,
   createExportBlobsHandle,
   runCompaction
-} from "./chunk-4OQZNXQG.js";
+} from "./chunk-TA67ZQUH.js";
 import {
   LazyQuery,
   NO_INDEXING,
   decodeIdxId,
   encodeIdxId
-} from "./chunk-EKEIEJL6.js";
+} from "./chunk-4UZDDS4S.js";
 import {
   normalizeIndexDefs
-} from "./chunk-GQ3BX5EA.js";
+} from "./chunk-I3ISCYT7.js";
 import {
   IMPLICIT_LAZY,
   Lru,
@@ -182,13 +182,13 @@ import {
 } from "./chunk-YMUFFJCO.js";
 import {
   readPath
-} from "./chunk-IGJCYUT5.js";
+} from "./chunk-NSITFOCJ.js";
 import {
   NO_CRDT
 } from "./chunk-PVEWA2DU.js";
 import {
   dictCollectionName
-} from "./chunk-6KTVJ5ZZ.js";
+} from "./chunk-KKVVBFKW.js";
 import {
   NO_I18N,
   getAtPath,
@@ -196,11 +196,11 @@ import {
   isDictKeyDescriptor,
   isI18nTextDescriptor,
   isStaticDictDescriptor
-} from "./chunk-WVE6YKMX.js";
+} from "./chunk-U5ZDYJLQ.js";
 import {
   isViaInstalled,
   viaBinder
-} from "./chunk-JNMTN5D5.js";
+} from "./chunk-LZHIYH32.js";
 import {
   NO_TEAM,
   describeAllUsersAuth,
@@ -223,7 +223,7 @@ import {
   saveShamirRecoveryEntries,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "./chunk-NCCEDL2K.js";
+} from "./chunk-66X4XWTM.js";
 import {
   assertKeyringOpenAllowed,
   buildRecipientKeyringFile,
@@ -238,15 +238,15 @@ import {
   listUsers,
   loadKeyring,
   updateKeyringIdentity
-} from "./chunk-CAGI4LLJ.js";
+} from "./chunk-AK6EWGDO.js";
 import {
   persistDirectoryConfig,
   readDirectoryConfig
-} from "./chunk-LX46B56Q.js";
+} from "./chunk-GJ5TMHKC.js";
 import {
   NO_BROKER,
   buildCredentialBrokerHandle
-} from "./chunk-OIBEJN5H.js";
+} from "./chunk-LYQUFIHL.js";
 import {
   NO_SESSION
 } from "./chunk-VKQCVU2Z.js";
@@ -255,16 +255,16 @@ import {
 } from "./chunk-4AOERLTV.js";
 import {
   NO_HISTORY
-} from "./chunk-LN7P6MZB.js";
+} from "./chunk-7ZPAL3F7.js";
 import {
   sha256Hex
-} from "./chunk-ZLHHE5XZ.js";
+} from "./chunk-YLIGPHN4.js";
 import {
   assertCutoverTierSafe,
   assertTierWritable,
   dekKey,
   liveRecordIsElevated
-} from "./chunk-PPCOKVFA.js";
+} from "./chunk-6ZTPSVY7.js";
 import {
   NO_VAULT_HEAD
 } from "./chunk-HK67PX4J.js";
@@ -276,7 +276,7 @@ import {
   readDottedPath,
   rebuildSubjectIndex,
   removeSubjectRef
-} from "./chunk-U27Y4DJZ.js";
+} from "./chunk-TWELPVXG.js";
 import {
   RecordCodec,
   SEALED_CEK_NS,
@@ -292,7 +292,7 @@ import {
   rewrapBodyToDek,
   validateSchemaInput,
   verifyRecordIdentity
-} from "./chunk-OHOKBMTM.js";
+} from "./chunk-FUE2KPKM.js";
 import {
   buildDeleteMarker,
   buildRecordEnvelope,
@@ -302,7 +302,7 @@ import {
 } from "./chunk-PENPHA45.js";
 import {
   encrypt
-} from "./chunk-AU3AUJIZ.js";
+} from "./chunk-RQQIB7CD.js";
 import {
   SealedHandle
 } from "./chunk-IGNJOJEP.js";
@@ -348,7 +348,7 @@ import {
   UnsupportedTierCompositionError,
   ValidationError,
   isConflictError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-HKANJAOP.js";
 
 // src/kernel/merge-authority.ts
 function buildMergeAuthority(keyring) {
@@ -508,7 +508,7 @@ function validateSecretModeOptions(options) {
 }
 async function resolveEffectiveSecret(options, store, vault) {
   if (options.secretMode === "managed") {
-    const { resolveManagedSecret } = await import("./managed-secret-IARIJJ7Q.js");
+    const { resolveManagedSecret } = await import("./managed-secret-6QTGWZTW.js");
     return resolveManagedSecret(store, vault, options.sealingKey);
   }
   return options.secret;
@@ -526,7 +526,7 @@ function ownerKeyringOptions(options, secret) {
 
 // src/port/by/default-provider.ts
 async function createDefaultCoordinationProvider(store) {
-  const { StoreCoordinationProvider } = await import("./store-coordination-provider-TYKNR3OU.js");
+  const { StoreCoordinationProvider } = await import("./store-coordination-provider-XCX77ZBE.js");
   return new StoreCoordinationProvider(store);
 }
 
@@ -2460,7 +2460,7 @@ function resolveCollectionConfig(opts) {
 }
 
 // src/with-formula/computed/lazy.ts
-var loadComputed = lazy(() => import("./computed-GSTLWSY5.js"));
+var loadComputed = lazy(() => import("./computed-M4QZVSPX.js"));
 async function loadEvalComputedFields() {
   return (await loadComputed()).evalComputedFields;
 }
@@ -2646,7 +2646,8 @@ var Collection = class {
   fieldMeta;
   /** Collection-level descriptive metadata declared via `meta`; read by `getMeta()`, surfaced in `describe()`. */
   meta;
-  /** Outbound ref declarations (snapshot from vault refRegistry at construction time); used by `describe()`. */
+  /** Outbound ref declarations (snapshot from the vault refRegistry); read by `describe()` and
+   *  {@link _txAtomicSafe}. Mutable for {@link _attachDeclaredRefs} (#1141). */
   _refs;
   /** Money field descriptors keyed by field path, typed as the opaque {@link ViaDescriptor} marker
    *  (the kernel never inspects the concrete shape); `put()` quantizes to a scaled-int string,
@@ -3242,7 +3243,7 @@ var Collection = class {
     }
     await this.onAccess?.("find", "*");
     if (hits.length === 0) return [];
-    const { verifyDigestField } = await import("./verify-6J2YLKSO.js");
+    const { verifyDigestField } = await import("./verify-5QI3DGO2.js");
     const policy = {
       normalize: spec.verifyNormalize ?? "password",
       notLastN: spec.notLastN ?? 0,
@@ -3356,6 +3357,12 @@ var Collection = class {
   _applyMeta(meta) {
     if (this.meta === void 0) this.meta = meta;
   }
+  /** @internal #1141 — refresh the ref snapshot after a late `refs` declaration. Overwrites rather
+   *  than first-wins, deliberately: the argument is the ref registry's own merged view (see
+   *  `reconcileViaAttach`), which `RefRegistry.register` has already refused to let conflict. */
+  _attachDeclaredRefs(refs) {
+    this._refs = refs;
+  }
   /**
    * @internal — attach classified fields post-construction. See {@link _applyMoneyFields}.
    * First-wins. Note: unlike money/computed/meta, this cannot retro-seal a
@@ -3448,7 +3455,7 @@ var Collection = class {
       }
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-NI7SAXAZ.js");
+      const { resolveStaleMVOnRead } = await import("./stale-MIO5KGEP.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name, this.#dispatchCtx({ collection: this.name, id: "resolve-on-read" }));
     }
     let record;
@@ -3979,7 +3986,7 @@ var Collection = class {
    */
   async dispatchMaterializedViews(id, record, wave) {
     if (this.materializedViewSource === void 0) return;
-    const { dispatchMaterializedViews } = await import("./dispatch-4ZHLSFZQ.js");
+    const { dispatchMaterializedViews } = await import("./dispatch-KNWYDUYM.js");
     return dispatchMaterializedViews(this.#mvDispatchCtx(this.materializedViewSource), id, record, wave);
   }
   /**
@@ -4152,7 +4159,7 @@ var Collection = class {
    *  dispatch wave's per-target dedup; `undefined` on the local-write path (byte-identical). */
   async dispatchDerivations(id, record, version, wave) {
     if (this.derivationSource === void 0) return;
-    const { dispatchDerivations } = await import("./dispatch-77CB75KB.js");
+    const { dispatchDerivations } = await import("./dispatch-2ZE7Z5V2.js");
     return dispatchDerivations({
       ...this.#derivationDeleteCtx(this.derivationSource),
       via: this.via,
@@ -4467,7 +4474,7 @@ var Collection = class {
    */
   async dispatchArrayDerivationsOnDelete(id, eraseRecordShapeToo = false) {
     if (this.derivationSource === void 0) return 0;
-    const { dispatchArrayDerivationsOnDelete } = await import("./dispatch-77CB75KB.js");
+    const { dispatchArrayDerivationsOnDelete } = await import("./dispatch-2ZE7Z5V2.js");
     return dispatchArrayDerivationsOnDelete(this.#derivationDeleteCtx(this.derivationSource), id, eraseRecordShapeToo);
   }
   /**
@@ -4481,7 +4488,7 @@ var Collection = class {
    */
   async dispatchMaterializedViewsOnDelete(id) {
     if (this.materializedViewSource === void 0) return { deleted: 0, residueUndecodable: [], residueDeclined: [] };
-    const { dispatchMaterializedViewsOnDelete } = await import("./dispatch-4ZHLSFZQ.js");
+    const { dispatchMaterializedViewsOnDelete } = await import("./dispatch-KNWYDUYM.js");
     return dispatchMaterializedViewsOnDelete(this.#mvDispatchCtx(this.materializedViewSource), id);
   }
   /**
@@ -4501,7 +4508,7 @@ var Collection = class {
       );
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-NI7SAXAZ.js");
+      const { resolveStaleMVOnRead } = await import("./stale-MIO5KGEP.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name, this.#dispatchCtx({ collection: this.name, id: "resolve-on-read" }));
     }
     await this.ensureHydrated();
@@ -5611,14 +5618,14 @@ var Collection = class {
   /** C-A/R10: persist the classified marker once per classified handle (store I/O in config-drift.ts). */
   async _ensureClassifiedMarker() {
     if (this._markerPersisted || this.vdigFields === null) return;
-    const { persistClassifiedMarkerForFields } = await import("./classified-marker-NA6HUV33.js");
+    const { persistClassifiedMarkerForFields } = await import("./classified-marker-RYWYYZDB.js");
     await persistClassifiedMarkerForFields(this.adapter, this.vault, this.name, this.vdigFields, await this.getDEK(this.name));
     this._markerPersisted = true;
   }
   /** C-A/R10 drift signal — the marker's declared digest-only set, memoized to one store read per handle (see config-drift.ts). */
   async _classifiedMarkerDigestOnly() {
     if (this._markerDigestOnlyCache !== void 0) return this._markerDigestOnlyCache;
-    const { readClassifiedMarkerDigestOnly } = await import("./classified-marker-NA6HUV33.js");
+    const { readClassifiedMarkerDigestOnly } = await import("./classified-marker-RYWYYZDB.js");
     this._markerDigestOnlyCache = await readClassifiedMarkerDigestOnly(this.adapter, this.vault, this.name, await this.getDEK(this.name));
     return this._markerDigestOnlyCache;
   }
@@ -5740,10 +5747,10 @@ var Collection = class {
     if (busActive) await this.subsystemBus.dispatch(busPoint, event);
   }
   _txAtomicSafe(opType) {
-    if (this.materializedViewSource !== void 0 && this.materializedViewSource.registry().mvsForSource(this.name).length > 0 || this.derivationSource !== void 0 && this.derivationSource.registry().strategiesForSource(this.name).length > 0 || this.crdtMode !== void 0 || this.uniqueConstraints !== null || this.writeHooks !== void 0 && this.writeHooks.hasBeforeHandlers && !this.writeHooks.suppressed) return false;
+    if (this.materializedViewSource !== void 0 && (this.materializedViewSource.registry().hasPendingPlans() || this.materializedViewSource.registry().mvsForSource(this.name).length > 0) || this.derivationSource !== void 0 && this.derivationSource.registry().strategiesForSource(this.name).length > 0 || this.crdtMode !== void 0 || this.uniqueConstraints !== null || this.writeHooks !== void 0 && this.writeHooks.hasBeforeHandlers && !this.writeHooks.suppressed) return false;
     return opType === "put" ? Object.keys(this._refs).length === 0 : this.refEnforcer === void 0 || !this.refEnforcer._deleteCascadesPossible(this.name);
   }
-  // @internal #893/#906-prep atomic-commit eligibility gate (Task 4) — false on any derivation/MV source (any lifecycle), CRDT mode, unique constraints, or refs on this write direction. Put uses precise outbound `_refs`; delete (#922) consults the enforcer's `_deleteCascadesPossible(name)` — Vault unions ALL THREE cascade sources `enforceRefsOnDelete` (with-shape/links/vault-facade.ts) fires from (lookup-ref edges, classic inbound refs, managed links); anything narrower (e.g. `getInbound` alone) would admit unsafe atomic deletes, because `_prepareDelete` runs those cascades DURING prepare. #931 narrows #906's hooks blanket: only BEFORE-hooks gate (they can REFUSE a write, which only `put()`/`delete()` honors); after-hooks and the `afterPut`/`afterDelete` observe bus cannot refuse, so the atomic path fires them itself post-finalize via `_fireAtomicAfterWrite` instead of forfeiting the batch (the pre-#931 db-global blanket cost multi-tab write-relay and forget-subject apps the atomic path entirely). See atomic-eligibility.ts.
+  // @internal #893/#906-prep atomic-commit eligibility gate (Task 4) — false on any derivation/MV source (any lifecycle), false while ANY query-form MV plan is still parked (#1139: an unplanned strategy has no `_bySource` entry, so `mvsForSource` cannot see that this collection is one of its sources — and the atomic path skips MV dispatch, which is the very thing that would replan it), CRDT mode, unique constraints, or refs on this write direction. Put uses precise outbound `_refs`; delete (#922) consults the enforcer's `_deleteCascadesPossible(name)` — Vault unions ALL THREE cascade sources `enforceRefsOnDelete` (with-shape/links/vault-facade.ts) fires from (lookup-ref edges, classic inbound refs, managed links); anything narrower (e.g. `getInbound` alone) would admit unsafe atomic deletes, because `_prepareDelete` runs those cascades DURING prepare. #931 narrows #906's hooks blanket: only BEFORE-hooks gate (they can REFUSE a write, which only `put()`/`delete()` honors); after-hooks and the `afterPut`/`afterDelete` observe bus cannot refuse, so the atomic path fires them itself post-finalize via `_fireAtomicAfterWrite` instead of forfeiting the batch (the pre-#931 db-global blanket cost multi-tab write-relay and forget-subject apps the atomic path entirely). See atomic-eligibility.ts.
   _reconcileReadState(patch) {
     if (patch.dictKeyFields) this.dictKeyFields = { ...patch.dictKeyFields, ...this.dictKeyFields };
     if (patch.i18nFields) this.i18nFields = { ...patch.i18nFields, ...this.i18nFields };
@@ -7244,7 +7251,7 @@ var VaultLinks = class {
 // src/with-shape/links/lazy-handle.ts
 function makeLazyLinkSetHandle(d) {
   let engine = null;
-  const load = () => engine ??= import("./link-set-3POMQR3I.js").then(
+  const load = () => engine ??= import("./link-set-2AYA6BEI.js").then(
     ({ LinkSet }) => new LinkSet(d.adapter, d.vault, d.name, d.spec, d.encrypted, d.getDEK, d.actor, d.emitter, d.endpointExists)
   );
   return {
@@ -7650,6 +7657,10 @@ function reconcileViaAttach(coll, graph, name, vaultCtx, plan) {
     classifiedFields: plan.classifiedFields,
     computed: plan.computed
   }) : void 0;
+  if (plan.refs !== void 0) {
+    vaultCtx.refRegistry.register(name, plan.refs);
+    coll._attachDeclaredRefs(vaultCtx.refRegistry.getOutbound(name));
+  }
   if (plan.effectiveViaFields.moneyFields) coll._applyMoneyFields(plan.effectiveViaFields.moneyFields);
   if (plan.computed) coll._applyComputed(plan.computed);
   if (plan.fieldMeta) coll._applyFieldMeta(plan.fieldMeta);
@@ -7891,7 +7902,7 @@ function declareSatellite(ctx, collectionName, options, existingRegistry) {
   ctx.forEachSyncEngine((e) => e.remirrorPairResolvers([spec.base, spec.satellite]));
   const registry = reg;
   const baseSchema = ctx.getBaseSchema(spec.base);
-  void import("./post-register-Z5T7FY45.js").then((m) => m.postRegister(ctx.adapter, ctx.vaultName, spec, ctx.getDEK, baseSchema, registry)).catch(() => {
+  void import("./post-register-WBDTOLWD.js").then((m) => m.postRegister(ctx.adapter, ctx.vaultName, spec, ctx.getDEK, baseSchema, registry)).catch(() => {
   });
   return reg;
 }
@@ -8773,6 +8784,7 @@ var Vault = class {
    *  dispatch reads/writes — from this vault's OWN privates, rather than passing `this` itself. */
   _viaReconcileCtx() {
     return {
+      refRegistry: this.refRegistry,
       i18nStrategy: this.strategies.i18n,
       locale: this.locale,
       translateText: this.translateText,
@@ -8848,6 +8860,8 @@ var Vault = class {
     if (coll) {
       reconcileViaAttach(coll, this.graph, collectionName, this._viaReconcileCtx(), {
         effectiveViaFields,
+        ...options?.refs !== void 0 ? { refs: options.refs } : {},
+        // #1141 — late `refs` declaration
         ...options?.computed !== void 0 ? { computed: options.computed } : {},
         ...options?.fieldMeta !== void 0 ? { fieldMeta: options.fieldMeta } : {},
         ...options?.meta !== void 0 ? { meta: options.meta } : {},
@@ -8863,7 +8877,7 @@ var Vault = class {
         const strategies = options.schemaUpdate ?? [];
         const work = (async () => {
           const dek = await this.getDEK(collectionName);
-          const { persistSchemaIfNeeded } = await import("./register-UZ37QPDB.js");
+          const { persistSchemaIfNeeded } = await import("./register-VSPL7VRW.js");
           const result = await persistSchemaIfNeeded({
             store: this.adapter,
             vault: this.name,
@@ -9013,7 +9027,7 @@ var Vault = class {
         const work = (async () => {
           try {
             const dek = await this.getDEK(collectionName);
-            await (await import("./register-UZ37QPDB.js")).persistSchemaIfNeeded({
+            await (await import("./register-VSPL7VRW.js")).persistSchemaIfNeeded({
               store: this.adapter,
               vault: this.name,
               collectionName,
@@ -9059,7 +9073,7 @@ var Vault = class {
    * writes (unfenced walk — see `with-shape/satellites/migrate-cek.ts`); resumable.
    */
   async migrateSatellitePerRecordKeys(satelliteName) {
-    const { migrateSatelliteCek } = await import("./migrate-cek-XM2ETTZW.js");
+    const { migrateSatelliteCek } = await import("./migrate-cek-YBNJDJ2Q.js");
     return migrateSatelliteCek(satelliteName, this.collection(satelliteName, { perRecordKeys: true }));
   }
   /**
@@ -9690,7 +9704,7 @@ var Vault = class {
    */
   // eslint-disable-next-line @typescript-eslint/consistent-type-imports
   async _loadPodSigner() {
-    const { loadSigner } = await import("./signer-Q7XQBMPA.js");
+    const { loadSigner } = await import("./signer-N5TGVOTN.js");
     return loadSigner(this.adapter, this.name, this.getDEK);
   }
   async writeExportAudit(entry) {
@@ -10180,7 +10194,7 @@ var Vault = class {
   async _initGuards(handles) {
     if (handles.length === 0) return;
     const [{ GuardRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-F7U6KSLX.js"),
+      import("./registry-A7JADQXC.js"),
       import("./read-only-facade-CHCKSEPD.js")
     ]);
     const registry = new GuardRegistry();
@@ -10208,7 +10222,7 @@ var Vault = class {
   async _initDerivations(handles) {
     if (handles.length === 0) return;
     const [{ DerivationRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-L4ELKX6C.js"),
+      import("./registry-AOPJN2V4.js"),
       import("./read-only-facade-CHCKSEPD.js")
     ]);
     const registry = new DerivationRegistry();
@@ -10240,7 +10254,7 @@ var Vault = class {
    */
   async _initMaterializedViews(handles) {
     if (handles.length === 0) return;
-    const { MaterializedViewRegistry } = await import("./registry-SDT5LIGO.js");
+    const { MaterializedViewRegistry } = await import("./registry-QSMKWF4O.js");
     const registry = new MaterializedViewRegistry();
     this.materializedViewRegistry = registry;
     const db = this;
@@ -10265,7 +10279,7 @@ var Vault = class {
    */
   async _initOverlayedViews(handles) {
     if (handles.length === 0) return;
-    const { OverlayedViewRegistry } = await import("./registry-ETJNA7PO.js");
+    const { OverlayedViewRegistry } = await import("./registry-I4I3QIQ6.js");
     const registry = new OverlayedViewRegistry();
     const mvRegistry = this.materializedViewRegistry;
     const overlayNames = /* @__PURE__ */ new Set();
@@ -10323,18 +10337,19 @@ var Vault = class {
     if (registry === null) {
       return { written: 0, deleted: 0, failed: 0, residueUndecodable: [], residueDeclined: [] };
     }
+    await registry.resolvePendingPlans();
     const reg = registry.byName(name);
     if (!reg) {
       throw new Error(`refreshView: no MV registered with name "${name}"`);
     }
-    const { MaterializedViewExecutor } = await import("./executor-CZDXBXKE.js");
+    const { MaterializedViewExecutor } = await import("./executor-4SMYWPSU.js");
     const result = await MaterializedViewExecutor.refresh(reg, {
       getCollection: (n) => this.collection(n),
       getActiveTxContext: () => this.noydb._activeTxContextOrNull,
       getQueryContext: () => this,
       dispatchCtx: this._dispatchCtx({ collection: name, id: "refreshView" })
     });
-    const { clearMVStaleFully } = await import("./stale-NI7SAXAZ.js");
+    const { clearMVStaleFully } = await import("./stale-MIO5KGEP.js");
     await clearMVStaleFully(this.adapter, this.name, registry, name);
     return result;
   }
@@ -10347,7 +10362,7 @@ var Vault = class {
     if (registry === null) return { derived: 0, failed: 0, skippedFrozen: 0 };
     const strategies = registry.strategiesForSource(sourceCollection);
     if (strategies.length === 0) return { derived: 0, failed: 0, skippedFrozen: 0 };
-    const { DerivationExecutor } = await import("./executor-VRLG4TQJ.js");
+    const { DerivationExecutor } = await import("./executor-BJ7PCXCV.js");
     const sourceColl = this.collection(sourceCollection);
     const records = await sourceColl.list();
     const ctx = { vault: this.derivationFacade ?? new (await import("./read-only-facade-CHCKSEPD.js")).ReadOnlyVaultFacade(this, "derivation") };
@@ -10374,7 +10389,7 @@ var Vault = class {
           if (!outSpec) continue;
           const outputColl = this.collection(outSpec.collection);
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-NLQ7QAYW.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-PBEVZ5IQ.js");
             const prior = await loadFanoutSidecar(this.adapter, this.name, spec.source, id, key, this.getDEK, this.encrypted);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -10601,7 +10616,7 @@ var Vault = class {
    * collection.
    */
   async delegate(opts) {
-    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-JLNXM7KH.js");
+    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-UEJN2LDC.js");
     if (!this.keyring.kek) {
       throw new ValidationError(
         "issueDelegation: keyring.kek is null \u2014 issuing a delegation requires a tier-1 unlock. Re-authenticate at tier 1 (secret) first."
@@ -10623,7 +10638,7 @@ var Vault = class {
    * if the id does not exist.
    */
   async revokeDelegation(id) {
-    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-JLNXM7KH.js");
+    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-UEJN2LDC.js");
     await revokeDelegation(this.adapter, this.name, id);
     void DELEGATIONS_COLLECTION;
   }
@@ -10876,7 +10891,7 @@ var Vault = class {
    * @see design-history/2026-05-22-schema-dump-design.md
    */
   async dumpSchema(opts = {}) {
-    const { dumpVaultSchema } = await import("./walk-WRA7RAPY.js");
+    const { dumpVaultSchema } = await import("./walk-G5OAA3RE.js");
     return dumpVaultSchema(this, opts);
   }
   /**
@@ -10972,7 +10987,7 @@ var Vault = class {
    * separate vault instances now.
    */
   async getPodHandle() {
-    const { buildPodHandle } = await import("./pod-handle-MELERCKU.js");
+    const { buildPodHandle } = await import("./pod-handle-77YAUM4J.js");
     return buildPodHandle(this.adapter, this.name);
   }
   /**
@@ -11004,7 +11019,7 @@ var Vault = class {
    * both modes round-trip cleanly.
    */
   async dump() {
-    const { dumpVault } = await import("./backup-FSC36VWC.js");
+    const { dumpVault } = await import("./backup-UOLAXOJ4.js");
     return dumpVault(this.backupContext());
   }
   /**
@@ -11056,7 +11071,7 @@ var Vault = class {
    * — there's no chain to verify against.
    */
   async load(backupJson) {
-    const { loadVault } = await import("./backup-FSC36VWC.js");
+    const { loadVault } = await import("./backup-UOLAXOJ4.js");
     return loadVault(this.backupContext(), backupJson);
   }
   /**
@@ -11088,7 +11103,7 @@ var Vault = class {
    * way to detect tampering of an in-place vault.
    */
   async verifyBackupIntegrity() {
-    const { verifyBackupIntegrity } = await import("./backup-FSC36VWC.js");
+    const { verifyBackupIntegrity } = await import("./backup-UOLAXOJ4.js");
     return verifyBackupIntegrity(this.backupContext());
   }
   /**
@@ -11306,7 +11321,7 @@ var Vault = class {
    * is the live validator object, not a serialization of it).
    */
   async exportJSON(opts = {}) {
-    const { exportVaultJSON } = await import("./backup-FSC36VWC.js");
+    const { exportVaultJSON } = await import("./backup-UOLAXOJ4.js");
     return exportVaultJSON(this.backupContext(), opts);
   }
 };
@@ -13234,7 +13249,7 @@ var Noydb = class {
       if (!facade) return;
       const ctx = { existing, vault: facade, userId: e.userId, role: e.role };
       await registry.runChecks(e.collection, incoming, ctx);
-      const { GuardExecutor } = await import("./executor-DVJAWN3B.js");
+      const { GuardExecutor } = await import("./executor-O4UP4M3C.js");
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, e.docId, existing, incoming, e.computedFieldNames);
       }
@@ -14606,7 +14621,7 @@ async function createNoydb(options) {
   if (!options.store) options = { ...options, store: memoryStore() };
   validateSecretModeOptions(options);
   if (!options.coordinationStrategy) options = { ...options, coordinationStrategy: await createDefaultCoordinationProvider(options.store) };
-  if (!options.userApiFactory) options = { ...options, userApiFactory: (await import("./api-EYNT6KGS.js")).createUserApi };
+  if (!options.userApiFactory) options = { ...options, userApiFactory: (await import("./api-ETB5Y4DY.js")).createUserApi };
   if (!options.policyFactory) {
     const policyModule = await import("./policy/index.js");
     options = { ...options, policyFactory: policyModule.createNoydbPolicy, policyCheckGateFn: policyModule.checkGate };
@@ -14641,4 +14656,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-LGFTOU27.js.map
+//# sourceMappingURL=chunk-ZILONQGE.js.map