@rotorsoft/act 1.23.19 → 1.23.21

package/dist/index.js

@@ -2076,8 +2076,21 @@ async function load(me, target, callback, patch_fn = bare_patch) {
       // a non-time-travel cold load — a bounded load full-scans real events
       // under its `asOf` filter. This is the single floor-eligibility decision
       // for the whole system; the stores apply the floor whenever asked and
-      // never re-derive it (RFC 1274). The warm path resumes from `after`.
-      ...cached ? { after: cached.event_id } : { ...time_travel ? {} : { with_snaps: true }, ...asOf }
+      // never re-derive it (RFC 1274).
+      //
+      // The warm path resumes from `after`, and MUST also carry `with_snaps`
+      // (#1345): `after` and `with_snaps` are independent store conditions —
+      // `after` bounds the scan (id > cached.event_id), `with_snaps` keeps
+      // `__snapshot__` rows in the result. A stale (lagging/cross-process)
+      // cache checkpoint can sit below a newer `__snapshot__` boundary, and a
+      // windowed close (`app.close`/`.autocloses({keep})`) may have pruned the
+      // domain events between the checkpoint and that snapshot. Without
+      // `with_snaps` the rebaselining snapshot is filtered out and the fold
+      // silently applies the surviving tail on top of stale state (wrong
+      // count, yet `version` still reports the true head — the concurrency
+      // guard passes). With it, the snapshot in the after-window rebaselines
+      // the fold; when no snapshot falls in the window it is a no-op.
+      ...cached ? { after: cached.event_id, with_snaps: true } : { ...time_travel ? {} : { with_snaps: true }, ...asOf }
     }
   );
   const head_is_tombstone = event?.name === TOMBSTONE_EVENT;