@noy-db/hub 0.6.0-pre.22 → 0.6.0-pre.24

package/dist/session/index.js

@@ -12,24 +12,24 @@ import {
   revokeAllSessions,
   revokeSession,
   validateSessionPolicy
-} from "../chunk-6ZGDIN2D.js";
+} from "../chunk-H6J6MZ4J.js";
 import {
   NO_SESSION
 } from "../chunk-VKQCVU2Z.js";
 import "../chunk-4AOERLTV.js";
-import "../chunk-DIVPOJPV.js";
-import "../chunk-PENPHA45.js";
-import "../chunk-IUQPNAGR.js";
-import "../chunk-AELW6OJZ.js";
-import "../chunk-DUUARUZI.js";
+import "../chunk-43FOH2OK.js";
+import "../chunk-FX3UIDCS.js";
+import "../chunk-NK7DO6A2.js";
+import "../chunk-AM6V36AG.js";
+import "../chunk-AU45F5FD.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-O5QXH7U7.js";
-import "../chunk-IGNJOJEP.js";
+import "../chunk-D7STIWJO.js";
+import "../chunk-UJ4Z67UQ.js";
 import {
   SessionExpiredError,
   SessionNotFoundError,
   SessionPolicyError
-} from "../chunk-PKUJ3JLQ.js";
+} from "../chunk-5OFC3QYL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-party/session/active.ts

package/dist/shadow/index.js

@@ -1,11 +1,11 @@
 import {
   CollectionFrame,
   VaultFrame
-} from "../chunk-L2YYIQYR.js";
+} from "../chunk-MXJMCTSI.js";
 import {
   NO_SHADOW
 } from "../chunk-SMY5X46Z.js";
-import "../chunk-PKUJ3JLQ.js";
+import "../chunk-5OFC3QYL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-fork/shadow/active.ts

package/dist/signer-AJ3MCSPI.js

@@ -0,0 +1,25 @@
+import {
+  ATTESTATIONS_COLLECTION,
+  REVOKED_RECORD_ID,
+  SIGNER_RECORD_ID,
+  loadOrCreateSigner,
+  loadSigner
+} from "./chunk-Z45PK2H5.js";
+import "./chunk-43FOH2OK.js";
+import "./chunk-FX3UIDCS.js";
+import "./chunk-NK7DO6A2.js";
+import "./chunk-AM6V36AG.js";
+import "./chunk-AU45F5FD.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-D7STIWJO.js";
+import "./chunk-UJ4Z67UQ.js";
+import "./chunk-5OFC3QYL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  ATTESTATIONS_COLLECTION,
+  REVOKED_RECORD_ID,
+  SIGNER_RECORD_ID,
+  loadOrCreateSigner,
+  loadSigner
+};
+//# sourceMappingURL=signer-AJ3MCSPI.js.map

package/dist/snapshots/index.js

@@ -4,19 +4,19 @@ import {
 import {
   readPod,
   writePod
-} from "../chunk-2VMCJUK6.js";
-import "../chunk-HRSEAGLI.js";
-import "../chunk-DIVPOJPV.js";
-import "../chunk-PENPHA45.js";
-import "../chunk-IUQPNAGR.js";
-import "../chunk-AELW6OJZ.js";
-import "../chunk-DUUARUZI.js";
+} from "../chunk-DM2BZDNV.js";
+import "../chunk-TTGZ6KGY.js";
+import "../chunk-43FOH2OK.js";
+import "../chunk-FX3UIDCS.js";
+import "../chunk-NK7DO6A2.js";
+import "../chunk-AM6V36AG.js";
+import "../chunk-AU45F5FD.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-O5QXH7U7.js";
-import "../chunk-IGNJOJEP.js";
+import "../chunk-D7STIWJO.js";
+import "../chunk-UJ4Z67UQ.js";
 import {
   SnapshotNotFoundError
-} from "../chunk-PKUJ3JLQ.js";
+} from "../chunk-5OFC3QYL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-fork/snapshots/engine.ts

package/dist/{stale-FVK3WRMM.js → stale-KQR5QAYJ.js}

@@ -6,17 +6,17 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-WFC2GHJG.js";
+} from "./chunk-ZJJ46LNY.js";
 import "./chunk-5D2ALSM5.js";
-import "./chunk-DIVPOJPV.js";
-import "./chunk-PENPHA45.js";
-import "./chunk-IUQPNAGR.js";
-import "./chunk-AELW6OJZ.js";
-import "./chunk-DUUARUZI.js";
+import "./chunk-43FOH2OK.js";
+import "./chunk-FX3UIDCS.js";
+import "./chunk-NK7DO6A2.js";
+import "./chunk-AM6V36AG.js";
+import "./chunk-AU45F5FD.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-O5QXH7U7.js";
-import "./chunk-IGNJOJEP.js";
-import "./chunk-PKUJ3JLQ.js";
+import "./chunk-D7STIWJO.js";
+import "./chunk-UJ4Z67UQ.js";
+import "./chunk-5OFC3QYL.js";
 import "./chunk-PZ5AY32C.js";
 export {
   MV_STALE_COLLECTION,
@@ -27,4 +27,4 @@ export {
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-FVK3WRMM.js.map
+//# sourceMappingURL=stale-KQR5QAYJ.js.map

package/dist/storage-GACYAH6W.js

@@ -0,0 +1,23 @@
+import {
+  SCHEMAS_COLLECTION,
+  loadPersistedSchema,
+  loadPersistedSchemaEntry,
+  savePersistedSchema
+} from "./chunk-AKPIBKHK.js";
+import "./chunk-43FOH2OK.js";
+import "./chunk-FX3UIDCS.js";
+import "./chunk-NK7DO6A2.js";
+import "./chunk-AM6V36AG.js";
+import "./chunk-AU45F5FD.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-D7STIWJO.js";
+import "./chunk-UJ4Z67UQ.js";
+import "./chunk-5OFC3QYL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  SCHEMAS_COLLECTION,
+  loadPersistedSchema,
+  loadPersistedSchemaEntry,
+  savePersistedSchema
+};
+//# sourceMappingURL=storage-GACYAH6W.js.map

package/dist/{store-coordination-provider-HIPOZMC2.js → store-coordination-provider-RII4H3PJ.js}

@@ -1,18 +1,18 @@
 import {
   loadFence,
   saveFence
-} from "./chunk-FFSQFH6D.js";
-import "./chunk-DIVPOJPV.js";
+} from "./chunk-DNKVKO7K.js";
+import "./chunk-43FOH2OK.js";
 import {
   buildRecordEnvelope
-} from "./chunk-PENPHA45.js";
-import "./chunk-IUQPNAGR.js";
-import "./chunk-AELW6OJZ.js";
-import "./chunk-DUUARUZI.js";
+} from "./chunk-FX3UIDCS.js";
+import "./chunk-NK7DO6A2.js";
+import "./chunk-AM6V36AG.js";
+import "./chunk-AU45F5FD.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-O5QXH7U7.js";
-import "./chunk-IGNJOJEP.js";
-import "./chunk-PKUJ3JLQ.js";
+import "./chunk-D7STIWJO.js";
+import "./chunk-UJ4Z67UQ.js";
+import "./chunk-5OFC3QYL.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/schema-update/client-registry.ts
@@ -145,4 +145,4 @@ function unref(timer) {
 export {
   StoreCoordinationProvider
 };
-//# sourceMappingURL=store-coordination-provider-HIPOZMC2.js.map
+//# sourceMappingURL=store-coordination-provider-RII4H3PJ.js.map

package/dist/sync/index.js

@@ -2,20 +2,20 @@ import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-ZUDIY7YP.js";
+} from "../chunk-HMS3OCMA.js";
 import {
   NO_SYNC
 } from "../chunk-T7IR4N2S.js";
-import "../chunk-NCAMIRFB.js";
-import "../chunk-DIVPOJPV.js";
-import "../chunk-PENPHA45.js";
-import "../chunk-IUQPNAGR.js";
-import "../chunk-AELW6OJZ.js";
-import "../chunk-DUUARUZI.js";
+import "../chunk-OQT3G55N.js";
+import "../chunk-43FOH2OK.js";
+import "../chunk-FX3UIDCS.js";
+import "../chunk-NK7DO6A2.js";
+import "../chunk-AM6V36AG.js";
+import "../chunk-AU45F5FD.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-O5QXH7U7.js";
-import "../chunk-IGNJOJEP.js";
-import "../chunk-PKUJ3JLQ.js";
+import "../chunk-D7STIWJO.js";
+import "../chunk-UJ4Z67UQ.js";
+import "../chunk-5OFC3QYL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-sync/active.ts

package/dist/team/index.js

@@ -2,7 +2,7 @@ import {
   MemoryDeviceSealProvider,
   beginEchoUnlock,
   withTeam
-} from "../chunk-7LJA7T4W.js";
+} from "../chunk-2CURJCLC.js";
 import {
   NO_TEAM,
   burnPaperRecoveryEntry,
@@ -31,8 +31,8 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-F5IFR56V.js";
-import "../chunk-3ENNPCIW.js";
+} from "../chunk-NFARMKWK.js";
+import "../chunk-ZY6P7M52.js";
 import {
   buildEchoBlock,
   buildRecipientKeyringFile,
@@ -53,21 +53,21 @@ import {
   updateKeyringIdentity,
   verifyPrompt,
   verifyTypedEcho
-} from "../chunk-FFESJQ5A.js";
-import "../chunk-KMGAFLCK.js";
-import "../chunk-OCW3IM2F.js";
-import "../chunk-WUNRUSBJ.js";
-import "../chunk-DIVPOJPV.js";
-import "../chunk-PENPHA45.js";
-import "../chunk-IUQPNAGR.js";
-import "../chunk-AELW6OJZ.js";
-import "../chunk-DUUARUZI.js";
+} from "../chunk-YEEV4ZXL.js";
+import "../chunk-SQWXF2HP.js";
+import "../chunk-57MEX4LL.js";
+import "../chunk-NSZGZYZL.js";
+import "../chunk-43FOH2OK.js";
+import "../chunk-FX3UIDCS.js";
+import "../chunk-NK7DO6A2.js";
+import "../chunk-AM6V36AG.js";
+import "../chunk-AU45F5FD.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-O5QXH7U7.js";
-import "../chunk-IGNJOJEP.js";
+import "../chunk-D7STIWJO.js";
+import "../chunk-UJ4Z67UQ.js";
 import {
   TeamNotEnabledError
-} from "../chunk-PKUJ3JLQ.js";
+} from "../chunk-5OFC3QYL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MemoryDeviceSealProvider,

package/dist/tiers/index.js

@@ -11,20 +11,20 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-SRR22EW2.js";
-import "../chunk-OCW3IM2F.js";
-import "../chunk-WUNRUSBJ.js";
-import "../chunk-DIVPOJPV.js";
-import "../chunk-PENPHA45.js";
-import "../chunk-IUQPNAGR.js";
-import "../chunk-AELW6OJZ.js";
-import "../chunk-DUUARUZI.js";
+} from "../chunk-L34HKPIS.js";
+import "../chunk-57MEX4LL.js";
+import "../chunk-NSZGZYZL.js";
+import "../chunk-43FOH2OK.js";
+import "../chunk-FX3UIDCS.js";
+import "../chunk-NK7DO6A2.js";
+import "../chunk-AM6V36AG.js";
+import "../chunk-AU45F5FD.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-O5QXH7U7.js";
-import "../chunk-IGNJOJEP.js";
+import "../chunk-D7STIWJO.js";
+import "../chunk-UJ4Z67UQ.js";
 import {
   TiersNotEnabledError
-} from "../chunk-PKUJ3JLQ.js";
+} from "../chunk-5OFC3QYL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_TIERS,

package/dist/to/index.js

@@ -5,7 +5,7 @@ import {
   PodVersionConflictError,
   StoreCapabilityError,
   UnknownStoreKindError
-} from "../chunk-PKUJ3JLQ.js";
+} from "../chunk-5OFC3QYL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/port/to/locator.ts

package/dist/transactions/index.js

@@ -3,16 +3,16 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "../chunk-FGZ7GJXO.js";
+} from "../chunk-VZEBHQRT.js";
 import {
   lazy
 } from "../chunk-5D2ALSM5.js";
 import "../chunk-4AOERLTV.js";
-import "../chunk-PKUJ3JLQ.js";
+import "../chunk-5OFC3QYL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/tx/dry-run.ts
-var loadGuardExecutor = lazy(() => import("../executor-6YQYFGHK.js"));
+var loadGuardExecutor = lazy(() => import("../executor-H7KLBIJN.js"));
 var SEP = " ";
 var keyOf = (op) => `${op.vaultName}${SEP}${op.collectionName}${SEP}${op.id}`;
 async function runDryRun(db, fn) {

package/dist/util/index.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-PY4KJPYU.js";
 import {
   FilenameSanitizationError
-} from "../chunk-PKUJ3JLQ.js";
+} from "../chunk-5OFC3QYL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/kernel/util/sanitize-filename.ts

package/dist/vault-head/index.js

@@ -6,19 +6,19 @@ import {
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "../chunk-DIVPOJPV.js";
+} from "../chunk-43FOH2OK.js";
 import {
   buildRecordEnvelope
-} from "../chunk-PENPHA45.js";
-import "../chunk-IUQPNAGR.js";
-import "../chunk-AELW6OJZ.js";
-import "../chunk-DUUARUZI.js";
+} from "../chunk-FX3UIDCS.js";
+import "../chunk-NK7DO6A2.js";
+import "../chunk-AM6V36AG.js";
+import "../chunk-AU45F5FD.js";
 import "../chunk-LP7BEXCT.js";
 import {
   encrypt
-} from "../chunk-O5QXH7U7.js";
-import "../chunk-IGNJOJEP.js";
-import "../chunk-PKUJ3JLQ.js";
+} from "../chunk-D7STIWJO.js";
+import "../chunk-UJ4Z67UQ.js";
+import "../chunk-5OFC3QYL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/vault-head/head.ts

package/dist/{verify-KYICK5IW.js → verify-OMPYUO7C.js}

@@ -2,10 +2,10 @@ import {
   blindedEqual,
   evaluateKofN,
   openVdigPayload
-} from "./chunk-IUQPNAGR.js";
+} from "./chunk-NK7DO6A2.js";
 import {
   dualReadSealedSlot
-} from "./chunk-AELW6OJZ.js";
+} from "./chunk-AM6V36AG.js";
 import {
   VDIG_ITERATIONS,
   normalizeForVerify,
@@ -14,11 +14,11 @@ import {
 import {
   base64ToBuffer,
   generateSalt
-} from "./chunk-O5QXH7U7.js";
+} from "./chunk-D7STIWJO.js";
 import {
   ClassifiedConfigError,
   ClassifiedVerifyError
-} from "./chunk-PKUJ3JLQ.js";
+} from "./chunk-5OFC3QYL.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/kernel/enclave/classify/verify.ts
@@ -137,4 +137,4 @@ export {
   verifyDigestField,
   verifyTextField
 };
-//# sourceMappingURL=verify-KYICK5IW.js.map
+//# sourceMappingURL=verify-OMPYUO7C.js.map

package/dist/via/blob/index.d.ts

@@ -33,6 +33,9 @@ export { BLOB_COLLECTION, BLOB_INDEX_COLLECTION, BLOB_CHUNKS_COLLECTION, BLOB_SL
 export type { BlobObject, SlotRecord, SlotInfo, VersionRecord, BlobPutOptions, BlobResponseOptions, } from '../../kernel/types.js';
 export { detectMimeType, detectMagic, isPreCompressed } from '../../with-shape/blobs/mime-magic.js';
 export { runCompaction, BLOB_EVICTION_AUDIT_COLLECTION } from '../../with-shape/blobs/blob-compaction.js';
+export { reportOrphanBlobChunks } from '../../with-shape/blobs/orphan-report.js';
+export type { OrphanChunkReport } from '../../with-shape/blobs/orphan-report.js';
+export type { NoydbStore } from '../../kernel/types.js';
 export type { BlobFieldsConfig, BlobFieldPolicy, BlobEvictionEntry, CompactRunOptions, CompactionResult, CompactionContext, } from '../../with-shape/blobs/blob-compaction.js';
 export { createExportBlobsHandle, ExportBlobsAbortedError, EXPORT_AUDIT_COLLECTION, } from '../../with-shape/blobs/export-blobs.js';
 export type { ExportBlobsOptions, ExportedBlob, ExportBlobsHandle, ExportBlobsAuditEntry, } from '../../with-shape/blobs/export-blobs.js';

package/dist/walk-ZYC74R65.js

@@ -0,0 +1,21 @@
+import {
+  dumpVaultSchema
+} from "./chunk-UHFF4G53.js";
+import "./chunk-KHKKD62N.js";
+import "./chunk-PORGC5MH.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-AKPIBKHK.js";
+import "./chunk-43FOH2OK.js";
+import "./chunk-FX3UIDCS.js";
+import "./chunk-NK7DO6A2.js";
+import "./chunk-AM6V36AG.js";
+import "./chunk-AU45F5FD.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-D7STIWJO.js";
+import "./chunk-UJ4Z67UQ.js";
+import "./chunk-5OFC3QYL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  dumpVaultSchema
+};
+//# sourceMappingURL=walk-ZYC74R65.js.map

package/dist/with-formula/materialized-views/dependency-analyzer.d.ts

@@ -65,6 +65,10 @@ export declare function summarizeUnionPlan<T extends Record<string, unknown>>(sp
  * one-to-one attachments and collect legs are independent
  * hash-grouped passes, so declaration order never changes the
  * materialized rows — a pure reorder must NOT force a refresh.
+ * `from` (#1140) constrains the legal orderings (a leg must follow the
+ * alias it attaches to) without making order meaningful: each descriptor
+ * carries its own `@alias`, and aliases are unique, so the sorted set
+ * still determines the leg graph exactly.
  *
  * The projection `map` is NOT fingerprinted (identical limitation as
  * the UNION arm `map`); consumers must bump the MV's `name` when

package/dist/with-formula/materialized-views/projection-legs.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Projection-leg topology (#810, extended by #1140).
+ *
+ * A projection MV's legs originally all attached to the PRIMARY row: a forward
+ * leg named an FK field on `projection.source`, and a reverse `collect` leg's
+ * `on` field had to `ref()` the source itself. Anything two FKs away was
+ * therefore inexpressible — `bill → entity → client` has no leg shape, because
+ * the bill has no `clientId` and `clients.entityId` refs `entities`, not
+ * `bills`.
+ *
+ * `from` closes that: a leg may attach to a previously-declared ALIAS instead of
+ * to the primary row. This module owns the two questions that follow from it —
+ * *is this leg graph well-formed?* and *which collection does a leg's rows come
+ * from?* — so neither the registry nor the executor has to re-derive them.
+ *
+ * **Why cycles are impossible by construction, and there is no depth cap.**
+ * `from` may only name an alias declared EARLIER in `joins`. A leg can therefore
+ * never reach forward, the graph is a forest rooted at the primary row, and its
+ * depth is bounded by the number of legs. Validation refuses an unknown or
+ * not-yet-declared alias, which is the same check.
+ */
+import type { ProjectionJoinLeg, ProjectionSpec } from './types.js';
+/** Reverse (one-to-many) leg — discriminated on `collect`, as the type is. */
+export declare function isCollectLeg(leg: ProjectionJoinLeg): leg is Extract<ProjectionJoinLeg, {
+    collect: string;
+}>;
+/**
+ * Refuse a malformed leg graph where `withMaterializedView()` checks the rest of
+ * the leg shape — at spec CONSTRUCTION, not at vault open and not at first
+ * materialization. Alias wiring is pure configuration: it needs no refs, no
+ * records and no store, so the earliest failure is the best one.
+ * (Ref EXISTENCE still resolves at first materialization, unchanged — refs
+ * cannot exist until after `openVault()` returns.)
+ */
+export declare function validateProjectionLegs<T extends Record<string, unknown>>(mvName: string, projection: ProjectionSpec<T>): void;
+/**
+ * The collection a leg's rows come from — the primary source for a root leg, the
+ * `from` leg's own target otherwise.
+ *
+ * Returns `null` when a forward `ref()` somewhere along the chain is not
+ * declared yet, which at registration time is the normal case rather than an
+ * error: refs are declared after `openVault()` returns, so the registry retries
+ * this on every dispatch until it resolves (`_pendingForwardDeps`).
+ *
+ * `resolveRef` is passed in rather than imported so this module stays free of
+ * vault wiring — the registry hands it the ref registry's `getOutbound`, the
+ * executor hands it a join context lookup. Both answer the same question.
+ */
+export type RefLookup = (collection: string, field: string) => {
+    target: string;
+} | null;
+export declare function resolveLegOwner(leg: ProjectionJoinLeg, joins: ReadonlyArray<ProjectionJoinLeg>, source: string, resolveRef: RefLookup): string | null;
+/**
+ * The collection a FORWARD leg resolves INTO — i.e. its dependency. `null` while
+ * any ref in the chain (including this leg's own) is still undeclared.
+ */
+export declare function resolveForwardLegTarget(leg: Extract<ProjectionJoinLeg, {
+    field: string;
+}>, joins: ReadonlyArray<ProjectionJoinLeg>, source: string, resolveRef: RefLookup): string | null;

package/dist/with-formula/materialized-views/registry.d.ts

@@ -54,6 +54,33 @@ export declare class MaterializedViewRegistry {
      * target has resolved (see `_resolvePendingForwardDeps`).
      */
     private readonly _pendingForwardDeps;
+    /**
+     * Query-form strategies whose `query()` callback could not be planned at
+     * registration time because a `.join()` names a field whose `ref()` is not
+     * declared YET (#1139).
+     *
+     * Registration runs inside `openVault()`; a collection's refs can only be
+     * declared afterwards, so for a query-form MV that joins a declared FK there
+     * is NO call ordering the consumer can choose — the plan is simply built too
+     * early. Rather than failing the vault open, the strategy is parked here and
+     * replanned from {@link resolvePendingPlans}, which every write dispatch and
+     * `vault.refreshView()` call runs first. This is the query-form counterpart
+     * of `_pendingForwardDeps`, one level up: that defers a leg's TARGET, this
+     * defers the whole plan.
+     *
+     * Only `RefNotDeclaredError` parks a strategy. Every other planning failure
+     * still throws out of `openVault()` exactly as before, so a typo'd source or
+     * a malformed spec keeps its loud, early error.
+     *
+     * A parked strategy is invisible until it resolves: it contributes no
+     * `_bySource` entries and no cycle-detection edges (same caveat as a
+     * late-resolved forward target — `edges()` runs once at vault open). It also
+     * cannot be dispatched, which is why {@link hasPendingPlans} forces the
+     * conservative branch in `Collection._txAtomicSafe`: the atomic write path
+     * skips MV dispatch, and skipping it here would mean the write that was
+     * supposed to trigger the first replan is the one that gets missed.
+     */
+    private readonly _pendingPlans;
     /**
      * Register an MV. Invokes `spec.query()` once at registration time to
      * read the plan + join context; the resulting `Query<T>` is discarded
@@ -68,6 +95,29 @@ export declare class MaterializedViewRegistry {
     register(spec: MaterializedViewSpec<any>, db: MVQueryContext, options?: {
         knownCollections?: (name: string) => boolean;
     }): Promise<void>;
+    /**
+     * `true` while any query-form strategy is still unplanned (#1139). Read by
+     * `Collection._txAtomicSafe`, which must refuse the atomic write path while
+     * this holds — see the `_pendingPlans` doc comment for why.
+     */
+    hasPendingPlans(): boolean;
+    /**
+     * Replan every parked query-form strategy (#1139). Called at the head of both
+     * write dispatchers and of `vault.refreshView()`, so a strategy resolves on the
+     * first write or refresh after its source collection's refs are declared —
+     * which is the earliest moment it could produce a correct plan, and strictly
+     * before the first moment it could have any output to produce.
+     *
+     * Each entry is handed straight back to {@link register}, so a strategy that
+     * is STILL unplannable simply re-parks itself and the next dispatch tries
+     * again. Idempotent and cheap: the array empties as strategies resolve, and
+     * both callers skip the await entirely once it is empty.
+     *
+     * A late-resolved strategy does NOT retro-feed `edges()` — the unified cycle
+     * pass runs once at vault open, before refs exist. Same caveat, and the same
+     * reason, as a late-resolved forward-leg target.
+     */
+    resolvePendingPlans(): Promise<void>;
     /** All MVs that depend on `source`, in registration order. */
     mvsForSource(source: string): ReadonlyArray<RegisteredMV>;
     /**