@noy-db/hub 0.8.0-pre.0 → 0.8.0

package/dist/{chunk-T2LBQ5DV.js → chunk-MXOQ5JCG.js}

@@ -1,31 +1,31 @@
+import {
+  isManifestReservedCollection
+} from "./chunk-EPFF7LOX.js";
 import {
   LinkIntegrityError,
   declareLink,
   isLinkCollectionName,
   linkCollectionName,
   linkRowKey
-} from "./chunk-AOWGXU6D.js";
+} from "./chunk-Q4UHJ5SN.js";
 import {
   hashFields,
   validateSatelliteDeclaration
-} from "./chunk-6K7DPM7D.js";
+} from "./chunk-XQRFSKYM.js";
 import {
   resolveStaleOnRead
-} from "./chunk-TROR3ALR.js";
-import {
-  isManifestReservedCollection
-} from "./chunk-EPFF7LOX.js";
+} from "./chunk-JOSPH3E5.js";
 import {
   loadFence
-} from "./chunk-L7DOS3TE.js";
+} from "./chunk-VAORSCSU.js";
 import {
   buildPersistedIndexCallbacks,
   syncTierSearch
-} from "./chunk-6LNL42F5.js";
+} from "./chunk-Y3LPTBG7.js";
 import {
   isBaseLive,
   liveBaseIdSet
-} from "./chunk-GYGLAVCX.js";
+} from "./chunk-2MG3SW7Q.js";
 import {
   SchemaUpdateGate
 } from "./chunk-6LJY7X5A.js";
@@ -33,22 +33,54 @@ import {
   NO_TIERS,
   classifySealedShred,
   syncDerivedOutputs
-} from "./chunk-UPD5NWI5.js";
+} from "./chunk-DHHGL42E.js";
 import {
   NO_PORTABILITY
-} from "./chunk-ZUVBC32X.js";
+} from "./chunk-AUKKUPVB.js";
 import {
   NO_CARGO
-} from "./chunk-A6IJU4TK.js";
+} from "./chunk-52MGURXO.js";
+import {
+  saveSealedSecret
+} from "./chunk-3XJQBBZD.js";
+import {
+  runDrainBarrier
+} from "./chunk-DIZLQVAA.js";
 import {
   fallbackDerivationName
 } from "./chunk-RXLYKVTF.js";
 import {
-  saveSealedSecret
-} from "./chunk-ENAG3IY7.js";
+  CustodyApi,
+  NO_CUSTODY
+} from "./chunk-V3RWOOSO.js";
 import {
-  runDrainBarrier
-} from "./chunk-3JWHAR6E.js";
+  DEFAULT_POSTURE,
+  ViaGraph,
+  buildDescription,
+  collectKnownFieldNames,
+  computedEntryParts,
+  deriveZodFields,
+  guardReconcileCollisions,
+  mergeViaFields,
+  resolveCollectionConfig,
+  resolveComputedEdges,
+  resolveDescribeFieldIds,
+  resolveVirtualMoneyFields
+} from "./chunk-IUT3GWP3.js";
+import {
+  findMatchingIdsByPairs
+} from "./chunk-TFMM5DBB.js";
+import {
+  encodeVecId
+} from "./chunk-M5B2W6YY.js";
+import {
+  NO_CLASSIFIED,
+  guardClassifiedCompat,
+  resolveClassifiedFields
+} from "./chunk-GUZET4SG.js";
+import {
+  derivePersistedSchema
+} from "./chunk-747G6CT3.js";
 import {
   findRollupSpecForIntent,
   forgetDerivedFanout,
@@ -58,17 +90,53 @@ import {
   runGraphDispatchWave,
   selfWriteFieldEqual,
   touchFor
-} from "./chunk-K6W7BVZ6.js";
+} from "./chunk-MILI22XQ.js";
+import {
+  buildLookupAltIndex,
+  buildLookupSnapshotRows,
+  buildPresentForJoin,
+  checkLookupMembership,
+  coerceLookupKey,
+  collectLookupDictCompat,
+  enforceStaticDictOnPut,
+  matchesReferencingValue,
+  registerLookupRefEdges,
+  reservedDictDepsOf,
+  resolveDictSource,
+  resolveLabelFromMap,
+  updateReferencingRecords
+} from "./chunk-244QBK7Z.js";
 import {
   OverlayedCollection
-} from "./chunk-MLPHLJIQ.js";
+} from "./chunk-HS554XAF.js";
 import {
   INDEXED_STORE_POLICY,
   NO_SYNC
 } from "./chunk-T7IR4N2S.js";
 import {
   NO_ATTESTATION
-} from "./chunk-X4773RBR.js";
+} from "./chunk-PD64727P.js";
+import {
+  NO_COVERAGE
+} from "./chunk-RHVMZSUU.js";
+import {
+  NO_PERIODS,
+  isEffectivelyReopened,
+  isOrderableBusinessDate,
+  malformedBusinessDate,
+  purgeMarkersOn,
+  resolvePeriodKey,
+  resolveReopenState,
+  samePartition
+} from "./chunk-3A5DUZ56.js";
+import {
+  PERIODS_COLLECTION,
+  PERIOD_ARCHIVES_COLLECTION,
+  PERIOD_FREEZES_COLLECTION,
+  PERIOD_REOPENS_COLLECTION,
+  PERIOD_TARGET_PURGES_COLLECTION,
+  periodExclusiveUpperBound
+} from "./chunk-QBLT6POL.js";
 import {
   NO_SHADOW
 } from "./chunk-SMY5X46Z.js";
@@ -79,7 +147,7 @@ import {
   TxContext,
   bestEffortRevert,
   trackKeyedWrite
-} from "./chunk-5FDLC6G7.js";
+} from "./chunk-UA372JHH.js";
 import {
   lazy
 } from "./chunk-5D2ALSM5.js";
@@ -88,67 +156,26 @@ import {
   InvertedIndex,
   MemoryIndexStore,
   NO_SEARCH
-} from "./chunk-I3JDRCMW.js";
+} from "./chunk-RB4DOPGZ.js";
 import {
   NO_SEQUENCE,
   SEQUENCE_COLLECTION,
   compileSequenceFormat,
   resolveSequenceKey
-} from "./chunk-M522UYZ2.js";
-import {
-  CustodyApi,
-  NO_CUSTODY
-} from "./chunk-B6SJIBQK.js";
-import {
-  DEFAULT_POSTURE,
-  ViaGraph,
-  buildDescription,
-  collectKnownFieldNames,
-  computedEntryParts,
-  deriveZodFields,
-  guardReconcileCollisions,
-  mergeViaFields,
-  resolveCollectionConfig,
-  resolveComputedEdges,
-  resolveDescribeFieldIds,
-  resolveVirtualMoneyFields
-} from "./chunk-UD5EVGZ7.js";
-import {
-  findMatchingIdsByPairs
-} from "./chunk-TFMM5DBB.js";
-import {
-  encodeVecId
-} from "./chunk-MDWKM2XC.js";
-import {
-  derivePersistedSchema
-} from "./chunk-PSIV7CJV.js";
-import {
-  buildLookupAltIndex,
-  buildLookupSnapshotRows,
-  buildPresentForJoin,
-  checkLookupMembership,
-  coerceLookupKey,
-  collectLookupDictCompat,
-  enforceStaticDictOnPut,
-  matchesReferencingValue,
-  registerLookupRefEdges,
-  reservedDictDepsOf,
-  resolveDictSource,
-  resolveLabelFromMap,
-  updateReferencingRecords
-} from "./chunk-FH2L2E34.js";
+} from "./chunk-VFHCKG5M.js";
 import {
-  NO_CLASSIFIED,
-  guardClassifiedCompat,
-  resolveClassifiedFields
-} from "./chunk-QOOUUR4A.js";
+  EXPORT_AUDIT_COLLECTION,
+  NO_BLOBS,
+  createExportBlobsHandle,
+  runCompaction
+} from "./chunk-JSMTXZR3.js";
 import {
   LazyQuery,
   NO_INDEXING,
   compositeKey,
   decodeIdxId,
   encodeIdxId
-} from "./chunk-HBRLNOHL.js";
+} from "./chunk-V7ADQF5O.js";
 import {
   IMPLICIT_LAZY
 } from "./chunk-66TQOPFM.js";
@@ -163,71 +190,44 @@ import {
 } from "./chunk-PVEWA2DU.js";
 import {
   NO_CONSENT
-} from "./chunk-PEOZ34EM.js";
-import {
-  NO_COVERAGE
-} from "./chunk-RHVMZSUU.js";
-import {
-  NO_PERIODS,
-  isEffectivelyReopened,
-  isOrderableBusinessDate,
-  malformedBusinessDate,
-  purgeMarkersOn,
-  resolvePeriodKey,
-  resolveReopenState,
-  samePartition
-} from "./chunk-NRT6QZQB.js";
-import {
-  PERIODS_COLLECTION,
-  PERIOD_ARCHIVES_COLLECTION,
-  PERIOD_FREEZES_COLLECTION,
-  PERIOD_REOPENS_COLLECTION,
-  PERIOD_TARGET_PURGES_COLLECTION,
-  periodExclusiveUpperBound
-} from "./chunk-FW22ZCXT.js";
+} from "./chunk-GSAK56VF.js";
 import {
   NO_SEALED_RECORD
-} from "./chunk-PDCG6PR5.js";
+} from "./chunk-UEFOQH74.js";
 import {
   normalizeIndexDefs,
   parseFieldIndexSnapshot
-} from "./chunk-YSK2CU2Q.js";
+} from "./chunk-2AFX33YA.js";
 import {
   EXPORT_REDACTION_MARKER,
   ViaPipeline,
   exportRedact
-} from "./chunk-ORDURZBU.js";
+} from "./chunk-3EWS67C7.js";
 import {
   ScanBuilder
-} from "./chunk-F24ZZTHQ.js";
+} from "./chunk-JQYKPKG6.js";
 import {
   Query
-} from "./chunk-7JE7BDYJ.js";
+} from "./chunk-AL6ML4LA.js";
 import {
   NO_REDUCE
 } from "./chunk-3TDUWVWB.js";
 import {
   readPath
-} from "./chunk-HLEK5VAN.js";
-import {
-  EXPORT_AUDIT_COLLECTION,
-  NO_BLOBS,
-  createExportBlobsHandle,
-  runCompaction
-} from "./chunk-GF5BZ7D4.js";
+} from "./chunk-5WWDGFOS.js";
 import {
   dictCollectionName
-} from "./chunk-DF73H4UN.js";
+} from "./chunk-23D6M6VM.js";
 import {
   NO_I18N,
   getAtPath,
   isDictCollectionName,
   isStaticDictDescriptor
-} from "./chunk-GHLTDZRS.js";
+} from "./chunk-OKSTSITU.js";
 import {
   isViaInstalled,
   viaBinder
-} from "./chunk-Z5HTYMMQ.js";
+} from "./chunk-SYNY3VB5.js";
 import {
   NO_TEAM,
   describeAllUsersAuth,
@@ -250,7 +250,7 @@ import {
   saveShamirRecoveryEntries,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "./chunk-ZE4CHIED.js";
+} from "./chunk-DQESF6RP.js";
 import {
   assertKeyringOpenAllowed,
   buildRecipientKeyringFile,
@@ -265,15 +265,15 @@ import {
   listUsers,
   loadKeyring,
   updateKeyringIdentity
-} from "./chunk-M7NI3IWE.js";
+} from "./chunk-XSPFDUDG.js";
 import {
   persistDirectoryConfig,
   readDirectoryConfig
-} from "./chunk-7VCXZDA4.js";
+} from "./chunk-LIOVX5TJ.js";
 import {
   NO_BROKER,
   buildCredentialBrokerHandle
-} from "./chunk-4AF3TUMP.js";
+} from "./chunk-GZT3NQRA.js";
 import {
   NO_SESSION
 } from "./chunk-VKQCVU2Z.js";
@@ -282,19 +282,19 @@ import {
 } from "./chunk-4AOERLTV.js";
 import {
   NO_HISTORY
-} from "./chunk-QWGU66MP.js";
+} from "./chunk-LNSVGRHO.js";
 import {
   sha256Hex
-} from "./chunk-CKNGS5MH.js";
+} from "./chunk-6QVKPHBF.js";
 import {
   assertCutoverTierSafe,
   assertTierWritable,
   dekKey,
   liveRecordIsElevated
-} from "./chunk-JCN44NCY.js";
+} from "./chunk-FLPCETP6.js";
 import {
   NO_VAULT_HEAD
-} from "./chunk-HK67PX4J.js";
+} from "./chunk-HW7CMKUG.js";
 import {
   NO_FORGET,
   addSubjectRef,
@@ -303,36 +303,34 @@ import {
   readDottedPath,
   rebuildSubjectIndex,
   removeSubjectRef
-} from "./chunk-J6UOHJY5.js";
+} from "./chunk-JDEYF3PJ.js";
 import {
   RecordCodec,
   SEALED_CEK_NS,
   applyRewrappedBody,
+  buildDeleteMarker,
   buildRecordAad,
+  buildRecordEnvelope,
+  buildTombstone,
+  encrypt,
   findByDet,
   hasPerRecordKey,
   hasSealedBody,
+  isDeleteMarker,
+  isTombstone,
   makeReservedEnvelopes,
   openEnvelopeJson,
   queryByDet,
   resolveStableCek,
   rewrapBodyToDek,
-  validateSchemaInput,
   verifyRecordIdentity
-} from "./chunk-KJFW62P4.js";
-import {
-  buildDeleteMarker,
-  buildRecordEnvelope,
-  buildTombstone,
-  isDeleteMarker,
-  isTombstone
-} from "./chunk-SEE332EV.js";
+} from "./chunk-EZGV6F47.js";
 import {
-  encrypt
-} from "./chunk-UYB234ZR.js";
+  validateSchemaInput
+} from "./chunk-42ALPZ2B.js";
 import {
   SealedHandle
-} from "./chunk-ODVPTDPK.js";
+} from "./chunk-SV2PM2OY.js";
 import {
   AlreadyElevatedError,
   AttestationError,
@@ -372,7 +370,7 @@ import {
   UniqueConstraintError,
   ValidationError,
   isConflictError
-} from "./chunk-244VXYPG.js";
+} from "./chunk-37EPTBBR.js";
 
 // src/kernel/merge-authority.ts
 function buildMergeAuthority(keyring) {
@@ -553,7 +551,7 @@ function validateSecretModeOptions(options) {
 }
 async function resolveEffectiveSecret(options, store, vault) {
   if (options.secretMode === "managed") {
-    const { resolveManagedSecret } = await import("./managed-secret-S3MQ6SH6.js");
+    const { resolveManagedSecret } = await import("./managed-secret-MFTFT22X.js");
     return resolveManagedSecret(store, vault, options.sealingKey);
   }
   return options.secret;
@@ -571,7 +569,7 @@ function ownerKeyringOptions(options, secret) {
 
 // src/port/by/default-provider.ts
 async function createDefaultMesh(store) {
-  const { StoreMesh } = await import("./store-coordination-provider-2O2VUHKW.js");
+  const { StoreMesh } = await import("./store-coordination-provider-C4BPT5XF.js");
   return new StoreMesh(store);
 }
 
@@ -1725,7 +1723,7 @@ async function commitSequentially(ctx, entries, priors) {
 }
 
 // src/with-formula/computed/lazy.ts
-var loadComputed = lazy(() => import("./computed-TPFBX7U4.js"));
+var loadComputed = lazy(() => import("./computed-FAD7SED4.js"));
 async function loadEvalComputedFields() {
   return (await loadComputed()).evalComputedFields;
 }
@@ -2534,7 +2532,7 @@ var Collection = class {
     }
     await this.onAccess?.("find", "*");
     if (hits.length === 0) return [];
-    const { verifyDigestField } = await import("./verify-RVT67IMH.js");
+    const { verifyDigestField } = await import("./verify-UKALW7C2.js");
     const policy = {
       normalize: spec.verifyNormalize ?? "password",
       notLastN: spec.notLastN ?? 0,
@@ -2746,7 +2744,7 @@ var Collection = class {
       }
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-TJ3DYZMQ.js");
+      const { resolveStaleMVOnRead } = await import("./stale-6GCFMOOR.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name, this.#dispatchCtx({ collection: this.name, id: "resolve-on-read" }));
     }
     let record;
@@ -2867,30 +2865,35 @@ var Collection = class {
   }
   /** @internal The body of {@link put}; see the #1420 note there for why it is split. */
   async #putGated(id, record, options) {
-    await this.schemaUpdateGate?.assertWritable();
-    await this.schemaFence?.assertWritable(this.name);
     const hooksActive = this.#hooksActive();
     const busAfterPut = (this.subsystemBus?.hasHandlers("afterPut") ?? false) && !(this.subsystemBus?.dispatching ?? false);
     let event;
-    if (hooksActive || busAfterPut) {
-      const prior = await this.#priorForHook(id);
-      event = {
-        op: prior.record === null ? "create" : "update",
-        vault: this.vault,
-        collection: this.name,
-        docId: id,
-        before: prior.record,
-        after: record,
-        userId: this.keyring.userId,
-        timestamp: Date.now(),
-        txId: this.#txIdForHook(),
-        baseVersion: prior.version,
-        version: prior.version + 1
-      };
-      if (hooksActive) await this.writeHooks.runBefore(event);
-    }
-    if (this.writeQueue) await this.writeQueue.track(() => this._putInternal(id, record, options));
-    else await this._putInternal(id, record, options);
+    const gated = async (committed) => {
+      await this.schemaUpdateGate?.assertWritable();
+      await this.schemaFence?.assertWritable(this.name);
+      if (hooksActive || busAfterPut) {
+        const prior = await this.#priorForHook(id);
+        event = {
+          op: prior.record === null ? "create" : "update",
+          vault: this.vault,
+          collection: this.name,
+          docId: id,
+          before: prior.record,
+          after: record,
+          userId: this.keyring.userId,
+          timestamp: Date.now(),
+          txId: this.#txIdForHook(),
+          baseVersion: prior.version,
+          version: prior.version + 1
+        };
+        if (hooksActive) await this.writeHooks.runBefore(event);
+      }
+      committed();
+      await this._putInternal(id, record, options);
+    };
+    if (this.writeQueue) await this.writeQueue.trackGated(gated);
+    else await gated(() => {
+    });
     if (event) {
       if (hooksActive) await this.writeHooks.runAfter(event);
       if (busAfterPut) await this.subsystemBus.dispatch("afterPut", event);
@@ -3283,7 +3286,7 @@ var Collection = class {
    */
   async dispatchMaterializedViews(id, record, wave) {
     if (this.materializedViewSource === void 0) return;
-    const { dispatchMaterializedViews } = await import("./dispatch-3CQDJV5Q.js");
+    const { dispatchMaterializedViews } = await import("./dispatch-H4HV32AM.js");
     return dispatchMaterializedViews(this.#mvDispatchCtx(this.materializedViewSource), id, record, wave);
   }
   /**
@@ -3449,13 +3452,13 @@ var Collection = class {
    *  dispatch wave's per-target dedup; `undefined` on the local-write path (byte-identical). */
   async dispatchDerivations(id, record, version, wave, prior) {
     if (this.derivationSource === void 0) return;
-    const { dispatchDerivations } = await import("./dispatch-RH4LHKBH.js");
+    const { dispatchDerivations } = await import("./dispatch-JDZNGEB3.js");
     return dispatchDerivations(this.#derivationDispatchCtx(), id, record, version, wave, prior);
   }
   /** @internal — trigger fan-out for a deleted parent (#1249); see dispatch.ts. */
   async dispatchTriggerDerivationsOnDelete(id, deleted) {
     if (this.derivationSource === void 0) return;
-    const { dispatchTriggerDerivationsOnDelete } = await import("./dispatch-RH4LHKBH.js");
+    const { dispatchTriggerDerivationsOnDelete } = await import("./dispatch-JDZNGEB3.js");
     return dispatchTriggerDerivationsOnDelete(this.#derivationDispatchCtx(), id, deleted);
   }
   /**
@@ -3467,30 +3470,35 @@ var Collection = class {
   }
   /** @internal The body of {@link delete}; see the #1420 note on {@link put}. */
   async #deleteGated(id) {
-    await this.schemaUpdateGate?.assertWritable();
-    await this.schemaFence?.assertWritable(this.name);
     const hooksActive = this.#hooksActive();
     const busAfterDelete = (this.subsystemBus?.hasHandlers("afterDelete") ?? false) && !(this.subsystemBus?.dispatching ?? false);
     let event;
-    if (hooksActive || busAfterDelete) {
-      const prior = await this.#priorForHook(id);
-      event = {
-        op: "delete",
-        vault: this.vault,
-        collection: this.name,
-        docId: id,
-        before: prior.record,
-        after: null,
-        userId: this.keyring.userId,
-        timestamp: Date.now(),
-        txId: this.#txIdForHook(),
-        baseVersion: prior.version,
-        version: prior.version + 1
-      };
-      if (hooksActive) await this.writeHooks.runBefore(event);
-    }
-    if (this.writeQueue) await this.writeQueue.track(() => this._deleteInternal(id));
-    else await this._deleteInternal(id);
+    const gated = async (committed) => {
+      await this.schemaUpdateGate?.assertWritable();
+      await this.schemaFence?.assertWritable(this.name);
+      if (hooksActive || busAfterDelete) {
+        const prior = await this.#priorForHook(id);
+        event = {
+          op: "delete",
+          vault: this.vault,
+          collection: this.name,
+          docId: id,
+          before: prior.record,
+          after: null,
+          userId: this.keyring.userId,
+          timestamp: Date.now(),
+          txId: this.#txIdForHook(),
+          baseVersion: prior.version,
+          version: prior.version + 1
+        };
+        if (hooksActive) await this.writeHooks.runBefore(event);
+      }
+      committed();
+      await this._deleteInternal(id);
+    };
+    if (this.writeQueue) await this.writeQueue.trackGated(gated);
+    else await gated(() => {
+    });
     if (event) {
       if (hooksActive) await this.writeHooks.runAfter(event);
       if (busAfterDelete) await this.subsystemBus.dispatch("afterDelete", event);
@@ -3772,7 +3780,7 @@ var Collection = class {
    */
   async dispatchArrayDerivationsOnDelete(id, eraseRecordShapeToo = false) {
     if (this.derivationSource === void 0) return 0;
-    const { dispatchArrayDerivationsOnDelete } = await import("./dispatch-RH4LHKBH.js");
+    const { dispatchArrayDerivationsOnDelete } = await import("./dispatch-JDZNGEB3.js");
     return dispatchArrayDerivationsOnDelete(this.#derivationDeleteCtx(this.derivationSource), id, eraseRecordShapeToo);
   }
   /**
@@ -3786,7 +3794,7 @@ var Collection = class {
    */
   async dispatchMaterializedViewsOnDelete(id) {
     if (this.materializedViewSource === void 0) return { deleted: 0, residueUndecodable: [], residueDeclined: [] };
-    const { dispatchMaterializedViewsOnDelete } = await import("./dispatch-3CQDJV5Q.js");
+    const { dispatchMaterializedViewsOnDelete } = await import("./dispatch-H4HV32AM.js");
     return dispatchMaterializedViewsOnDelete(this.#mvDispatchCtx(this.materializedViewSource), id);
   }
   /**
@@ -3806,7 +3814,7 @@ var Collection = class {
       );
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-TJ3DYZMQ.js");
+      const { resolveStaleMVOnRead } = await import("./stale-6GCFMOOR.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name, this.#dispatchCtx({ collection: this.name, id: "resolve-on-read" }));
     }
     await this.ensureHydrated();
@@ -4971,14 +4979,14 @@ var Collection = class {
   /** C-A/R10: persist the classified marker once per classified handle (store I/O in config-drift.ts). */
   async _ensureClassifiedMarker() {
     if (this._markerPersisted || this.vdigFields === null) return;
-    const { persistClassifiedMarkerForFields } = await import("./classified-marker-W3USLL5M.js");
+    const { persistClassifiedMarkerForFields } = await import("./classified-marker-SIYKUU5L.js");
     await persistClassifiedMarkerForFields(this.adapter, this.vault, this.name, this.vdigFields, await this.getDEK(this.name));
     this._markerPersisted = true;
   }
   /** C-A/R10 drift signal — the marker's declared digest-only set, memoized to one store read per handle (see config-drift.ts). */
   async _classifiedMarkerDigestOnly() {
     if (this._markerDigestOnlyCache !== void 0) return this._markerDigestOnlyCache;
-    const { readClassifiedMarkerDigestOnly } = await import("./classified-marker-W3USLL5M.js");
+    const { readClassifiedMarkerDigestOnly } = await import("./classified-marker-SIYKUU5L.js");
     this._markerDigestOnlyCache = await readClassifiedMarkerDigestOnly(this.adapter, this.vault, this.name, await this.getDEK(this.name));
     return this._markerDigestOnlyCache;
   }
@@ -5432,7 +5440,7 @@ var DeferredNumberingStore = class {
   async readJson(collection, id) {
     const env = await this.adapter.get(this.vault, collection, id);
     if (!env) return { env: null, value: null };
-    const json = this.encrypted ? await openEnvelopeJson({ collection, id }, env, await this.dek(collection)) : env._data;
+    const json = this.encrypted ? await openEnvelopeJson({ collection, id }, env, await this.dek(collection)) : env._data ?? "";
     return { env, value: JSON.parse(json) };
   }
   async writeJson(collection, id, value, expectedVersion) {
@@ -6064,7 +6072,7 @@ var VaultPeriods = class {
   async readReserved(collection, key) {
     const env = await this.deps.adapter.get(this.deps.vault, collection, key);
     if (!env) return null;
-    const json = this.deps.encrypted ? await openEnvelopeJson({ collection, id: key }, env, await this.deps.getDEK(collection)) : env._data;
+    const json = this.deps.encrypted ? await openEnvelopeJson({ collection, id: key }, env, await this.deps.getDEK(collection)) : env._data ?? "";
     return JSON.parse(json);
   }
   async decryptPeriodRecord(periodId, envelope) {
@@ -6073,7 +6081,7 @@ var VaultPeriods = class {
       const dek = await this.deps.getDEK(PERIODS_COLLECTION);
       json = await openEnvelopeJson({ collection: PERIODS_COLLECTION, id: periodId }, envelope, dek);
     } else {
-      json = envelope._data;
+      json = envelope._data ?? "";
     }
     return JSON.parse(json);
   }
@@ -6646,7 +6654,7 @@ var VaultLinks = class {
 // src/with-shape/links/lazy-handle.ts
 function makeLazyLinkSetHandle(d) {
   let engine = null;
-  const load = () => engine ??= import("./link-set-JCMJ7ULP.js").then(
+  const load = () => engine ??= import("./link-set-MFXC24VK.js").then(
     ({ LinkSet }) => new LinkSet(d.adapter, d.vault, d.name, d.spec, d.encrypted, d.getDEK, d.actor, d.emitter, d.endpointExists)
   );
   return {
@@ -7297,7 +7305,7 @@ function declareSatellite(ctx, collectionName, options, existingRegistry) {
   ctx.forEachSyncEngine((e) => e.remirrorPairResolvers([spec.base, spec.satellite]));
   const registry = reg;
   const baseSchema = ctx.getBaseSchema(spec.base);
-  void import("./post-register-SLSXIPBV.js").then((m) => m.postRegister(ctx.adapter, ctx.vaultName, spec, ctx.getDEK, baseSchema, registry)).catch(() => {
+  void import("./post-register-7ND27CF2.js").then((m) => m.postRegister(ctx.adapter, ctx.vaultName, spec, ctx.getDEK, baseSchema, registry)).catch(() => {
   });
   return reg;
 }
@@ -7487,7 +7495,7 @@ function makeSatelliteProxy(target, spec, registry) {
       return filterLiveHits(hits, adapter, vaultName, spec.base);
     },
     // #591 Task 9 review fix: findByDet/queryByDet scan envelopes straight
-    // off the adapter (kernel/enclave/record-keys/deterministic.ts) and
+    // off the adapter (capsule/plumbing/deterministic.ts) and
     // return BARE records (no id), so a post-filter can't correlate a match
     // back to its base row. Instead the scan itself is scoped: re-run the
     // same det functions over the collection's own DeterministicContext
@@ -8274,7 +8282,7 @@ var Vault = class {
         const strategies = options.schemaUpdate ?? [];
         const work = (async () => {
           const dek = await this.getDEK(collectionName);
-          const { persistSchemaIfNeeded } = await import("./register-F3OYE7MJ.js");
+          const { persistSchemaIfNeeded } = await import("./register-DT5HZ2LZ.js");
           const result = await persistSchemaIfNeeded({
             store: this.adapter,
             vault: this.name,
@@ -8424,7 +8432,7 @@ var Vault = class {
         const work = (async () => {
           try {
             const dek = await this.getDEK(collectionName);
-            await (await import("./register-F3OYE7MJ.js")).persistSchemaIfNeeded({
+            await (await import("./register-DT5HZ2LZ.js")).persistSchemaIfNeeded({
               store: this.adapter,
               vault: this.name,
               collectionName,
@@ -8470,7 +8478,7 @@ var Vault = class {
    * writes (unfenced walk — see `with-shape/satellites/migrate-cek.ts`); resumable.
    */
   async migrateSatellitePerRecordKeys(satelliteName) {
-    const { migrateSatelliteCek } = await import("./migrate-cek-V7GKJZ7O.js");
+    const { migrateSatelliteCek } = await import("./migrate-cek-DZRFFOHW.js");
     return migrateSatelliteCek(satelliteName, this.collection(satelliteName, { perRecordKeys: true }));
   }
   /**
@@ -8773,7 +8781,7 @@ var Vault = class {
         },
         emitter: this.emitter,
         buildDeleteMarker,
-        // #647 fix wave 1 — real kernel/enclave builder; LookupHandle can't import it directly
+        // #647 fix wave 1 — real capsule/enclave-aes builder; LookupHandle can't import it directly
         // #650 Task 4 (#647) — choke-point participation for LOCAL writes: dirty-log tracking + a
         // one-shot graph-dispatch wave (local-write's `graphDispatch.collect`-equivalent; Task 5's ref edges give it dependents).
         onDirty: this.onDirty,
@@ -9105,7 +9113,7 @@ var Vault = class {
    */
   // eslint-disable-next-line @typescript-eslint/consistent-type-imports
   async _loadPodSigner() {
-    const { loadSigner } = await import("./signer-MBZZMXTC.js");
+    const { loadSigner } = await import("./signer-MHGW3OIL.js");
     return loadSigner(this.adapter, this.name, this.getDEK);
   }
   async writeExportAudit(entry) {
@@ -9137,7 +9145,7 @@ var Vault = class {
    */
   async _decryptEnvelopeForBundleFilter(env, collectionName, recordId) {
     if (!this.encrypted) {
-      return JSON.parse(env._data);
+      return JSON.parse(env._data ?? "");
     }
     const dek = await this.getDEK(collectionName);
     const json = await openEnvelopeJson({ collection: collectionName, id: recordId }, env, dek);
@@ -9595,7 +9603,7 @@ var Vault = class {
   async _initGuards(handles) {
     if (handles.length === 0) return;
     const [{ GuardRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-CILQFXFK.js"),
+      import("./registry-BHRZGZHF.js"),
       import("./read-only-facade-BIGO37U3.js")
     ]);
     const registry = new GuardRegistry();
@@ -9623,7 +9631,7 @@ var Vault = class {
   async _initDerivations(handles) {
     if (handles.length === 0) return;
     const [{ DerivationRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-YCDZV3VW.js"),
+      import("./registry-ET6ZFFWA.js"),
       import("./read-only-facade-BIGO37U3.js")
     ]);
     const registry = new DerivationRegistry();
@@ -9655,7 +9663,7 @@ var Vault = class {
    */
   async _initMaterializedViews(handles) {
     if (handles.length === 0) return;
-    const { MaterializedViewRegistry } = await import("./registry-ZGYS33TE.js");
+    const { MaterializedViewRegistry } = await import("./registry-THCPDEOD.js");
     const registry = new MaterializedViewRegistry();
     this.materializedViewRegistry = registry;
     const db = this;
@@ -9680,7 +9688,7 @@ var Vault = class {
    */
   async _initOverlayedViews(handles) {
     if (handles.length === 0) return;
-    const { OverlayedViewRegistry } = await import("./registry-XNNYQVKV.js");
+    const { OverlayedViewRegistry } = await import("./registry-HXFGLGTG.js");
     const registry = new OverlayedViewRegistry();
     const mvRegistry = this.materializedViewRegistry;
     const overlayNames = /* @__PURE__ */ new Set();
@@ -9743,14 +9751,14 @@ var Vault = class {
     if (!reg) {
       throw new Error(`refreshView: no MV registered with name "${name}"`);
     }
-    const { MaterializedViewExecutor } = await import("./executor-B6SRO2QS.js");
+    const { MaterializedViewExecutor } = await import("./executor-FMPVN6DT.js");
     const result = await MaterializedViewExecutor.refresh(reg, {
       getCollection: (n) => this.collection(n),
       getActiveTxContext: () => this.noydb._activeTxContextOrNull,
       getQueryContext: () => this,
       dispatchCtx: this._dispatchCtx({ collection: name, id: "refreshView" })
     });
-    const { clearMVStaleFully } = await import("./stale-TJ3DYZMQ.js");
+    const { clearMVStaleFully } = await import("./stale-6GCFMOOR.js");
     await clearMVStaleFully(this.adapter, this.name, registry, name);
     return result;
   }
@@ -9763,7 +9771,7 @@ var Vault = class {
     if (registry === null) return { derived: 0, failed: 0, skippedFrozen: 0 };
     const strategies = registry.strategiesForSource(sourceCollection);
     if (strategies.length === 0) return { derived: 0, failed: 0, skippedFrozen: 0 };
-    const { DerivationExecutor } = await import("./executor-RBKM5W5K.js");
+    const { DerivationExecutor } = await import("./executor-OSRZST2U.js");
     const sourceColl = this.collection(sourceCollection);
     const records = await sourceColl.list();
     const ctx = { vault: this.derivationFacade ?? new (await import("./read-only-facade-BIGO37U3.js")).ReadOnlyVaultFacade(this, "derivation") };
@@ -9790,7 +9798,7 @@ var Vault = class {
           if (!outSpec) continue;
           const outputColl = this.collection(outSpec.collection);
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-OT6RYLOL.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-L7NHPIOC.js");
             const prior = await loadFanoutSidecar(this.adapter, this.name, spec.source, id, key, this.getDEK, this.encrypted);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -10017,7 +10025,7 @@ var Vault = class {
    * collection.
    */
   async delegate(opts) {
-    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-S3AEPW2T.js");
+    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-NANZDG4N.js");
     if (!this.keyring.kek) {
       throw new ValidationError(
         "issueDelegation: keyring.kek is null \u2014 issuing a delegation requires a tier-1 unlock. Re-authenticate at tier 1 (secret) first."
@@ -10039,7 +10047,7 @@ var Vault = class {
    * if the id does not exist.
    */
   async revokeDelegation(id) {
-    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-S3AEPW2T.js");
+    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-NANZDG4N.js");
     await revokeDelegation(this.adapter, this.name, id);
     void DELEGATIONS_COLLECTION;
   }
@@ -10296,7 +10304,7 @@ var Vault = class {
    * @see design-history/2026-05-22-schema-dump-design.md
    */
   async dumpSchema(opts = {}) {
-    const { dumpVaultSchema } = await import("./walk-HJ42EISE.js");
+    const { dumpVaultSchema } = await import("./walk-4VPK7AS4.js");
     return dumpVaultSchema(this, opts);
   }
   /**
@@ -10392,7 +10400,7 @@ var Vault = class {
    * separate vault instances now.
    */
   async getPodHandle() {
-    const { buildPodHandle } = await import("./pod-handle-WGDFB4C2.js");
+    const { buildPodHandle } = await import("./pod-handle-A3LET7NO.js");
     return buildPodHandle(this.adapter, this.name);
   }
   /**
@@ -10424,7 +10432,7 @@ var Vault = class {
    * both modes round-trip cleanly.
    */
   async dump() {
-    const { dumpVault } = await import("./backup-7TFRVFLH.js");
+    const { dumpVault } = await import("./backup-YE2VQ26S.js");
     return dumpVault(this.backupContext());
   }
   /**
@@ -10476,7 +10484,7 @@ var Vault = class {
    * — there's no chain to verify against.
    */
   async load(backupJson) {
-    const { loadVault } = await import("./backup-7TFRVFLH.js");
+    const { loadVault } = await import("./backup-YE2VQ26S.js");
     return loadVault(this.backupContext(), backupJson);
   }
   /**
@@ -10508,7 +10516,7 @@ var Vault = class {
    * way to detect tampering of an in-place vault.
    */
   async verifyBackupIntegrity() {
-    const { verifyBackupIntegrity } = await import("./backup-7TFRVFLH.js");
+    const { verifyBackupIntegrity } = await import("./backup-YE2VQ26S.js");
     return verifyBackupIntegrity(this.backupContext());
   }
   /**
@@ -10738,7 +10746,7 @@ var Vault = class {
    * is the live validator object, not a serialization of it).
    */
   async exportJSON(opts = {}) {
-    const { exportVaultJSON } = await import("./backup-7TFRVFLH.js");
+    const { exportVaultJSON } = await import("./backup-YE2VQ26S.js");
     return exportVaultJSON(this.backupContext(), opts);
   }
 };
@@ -10826,6 +10834,36 @@ var WriteQueueTracker = class {
       throw error;
     }
   }
+  /**
+   * Run a write whose PRE-COMMIT phase may legitimately REFUSE — the schema
+   * gates, and a user `beforeWrite` hook that throws to abort. `fn` calls
+   * `committed()` at the point the store write itself begins.
+   *
+   * Before that point a rejection releases the depth it took but records NO
+   * queue error; after it, a rejection settles as a failure like `track`.
+   *
+   * #11 — why the phase is inside `depth` at all: `pending` is the documented
+   * shutdown guard (see the `writeQueue` getter's `beforeunload` example) and
+   * the schema fence does a fresh store read per write, so leaving the gates
+   * outside made `pending` read `false` during a real round-trip on every
+   * write. The refusal carve-out is what the old outside-the-queue placement
+   * was protecting ("a rejected write never counts toward depth") — it is kept
+   * deliberately, so a refused write cannot reject a concurrent `onFlush()`.
+   */
+  async trackGated(fn) {
+    this.begin();
+    let refusable = true;
+    try {
+      const value = await fn(() => {
+        refusable = false;
+      });
+      this.settle();
+      return value;
+    } catch (error) {
+      this.settle(refusable ? void 0 : error);
+      throw error;
+    }
+  }
   #emitChange() {
     for (const handler of this.#changeHandlers) handler();
   }
@@ -12765,7 +12803,7 @@ var Noydb = class {
       if (!facade) return;
       const ctx = { existing, vault: facade, userId: e.userId, role: e.role };
       await registry.runChecks(e.collection, incoming, ctx);
-      const { GuardExecutor } = await import("./executor-BI5CHWRY.js");
+      const { GuardExecutor } = await import("./executor-LBBBRTN5.js");
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, e.docId, existing, incoming, e.computedFieldNames);
       }
@@ -14153,7 +14191,7 @@ async function createNoydb(options) {
   if (!options.store) options = { ...options, store: memoryStore() };
   validateSecretModeOptions(options);
   if (!options.mesh) options = { ...options, mesh: await createDefaultMesh(options.store) };
-  if (!options.userApiFactory) options = { ...options, userApiFactory: (await import("./api-GVYEKSJE.js")).createUserApi };
+  if (!options.userApiFactory) options = { ...options, userApiFactory: (await import("./api-OS747DS4.js")).createUserApi };
   if (!options.policyFactory) {
     const policyModule = await import("./policy/index.js");
     options = { ...options, policyFactory: policyModule.createNoydbPolicy, policyCheckGateFn: policyModule.checkGate };
@@ -14186,4 +14224,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-T2LBQ5DV.js.map
+//# sourceMappingURL=chunk-MXOQ5JCG.js.map