@yuneta/gobj-ui 7.25.4 → 7.25.6

package/dist/gobj-ui.es.js

@@ -1,4 +1,4 @@
-import { SDATA, SDATA_END, clean_name, createElement2, createOneHtml, create_template_record, data_type_t, debounce, delete_from_list, duplicate_objects, empty_json, empty_string, escapeHtml, event_flag_t, flat_diff, gclass_create, gclass_find_by_name, gclass_flag_t, getPositionRelativeToBody, gobj_bottom_gobj, gobj_change_state, gobj_command, gobj_create, gobj_create_pure_child, gobj_create_service, gobj_current_state, gobj_destroy, gobj_find_child, gobj_find_service, gobj_full_name, gobj_gclass_name, gobj_get_gclass_trace_level2, gobj_global_trace_level, gobj_global_trace_no_level, gobj_is_destroying, gobj_is_playing, gobj_is_pure_child, gobj_is_running, gobj_is_service, gobj_is_volatil, gobj_match_children, gobj_name, gobj_parent, gobj_post_event, gobj_publish_event, gobj_read_attr, gobj_read_bool_attr, gobj_read_integer_attr, gobj_read_pointer_attr, gobj_read_str_attr, gobj_save_persistent_attrs, gobj_send_event, gobj_set_trace_machine_format, gobj_short_name, gobj_start, gobj_start_tree, gobj_stop, gobj_stop_children, gobj_subscribe_event, gobj_unsubscribe_event, gobj_write_attr, gobj_write_bool_attr, gobj_write_integer_attr, gobj_write_str_attr, gobj_yuno, gobj_yuno_name, is_array, is_boolean, is_date, is_gobj, is_null, is_number, is_object, is_string, json2flat, json_deep_copy, json_is_identical, json_object_size, json_object_update, json_object_update_missing, json_size, kw_clone_by_keys, kw_flag_t, kw_get_dict, kw_get_dict_value, kw_get_int, kw_get_local_storage_value, kw_get_str, kw_has_key, kw_set_dict_value, kw_set_local_storage_value, kwid_find_one_record, kwid_new_dict, log_error, log_warning, msg_iev_get_stack, parseBoolean, parseSVG, refresh_language, safeSrc, sdata_flag_t, set_console_log_enabled, set_log_callback, sprintf, str_in_list, template_get_field_desc, trace_level_t, trace_msg, treedb_decoder_fkey, treedb_encoder_fkey, treedb_get_field_desc, treedb_hook_data_size } from "@yuneta/gobj-js";
+import { SDATA, SDATA_END, clean_name, createElement2, createOneHtml, create_template_record, data_type_t, debounce, delete_from_list, duplicate_objects, empty_json, empty_string, escapeHtml, event_flag_t, flat_diff, gclass_create, gclass_find_by_name, gclass_flag_t, getPositionRelativeToBody, gobj_bottom_gobj, gobj_change_state, gobj_command, gobj_create, gobj_create_pure_child, gobj_create_service, gobj_current_state, gobj_destroy, gobj_find_child, gobj_find_service, gobj_full_name, gobj_gclass_name, gobj_get_gclass_trace_level2, gobj_global_trace_level, gobj_global_trace_no_level, gobj_has_event, gobj_is_destroying, gobj_is_playing, gobj_is_pure_child, gobj_is_running, gobj_is_service, gobj_is_volatil, gobj_match_children, gobj_name, gobj_parent, gobj_post_event, gobj_publish_event, gobj_read_attr, gobj_read_bool_attr, gobj_read_integer_attr, gobj_read_pointer_attr, gobj_read_str_attr, gobj_save_persistent_attrs, gobj_send_event, gobj_set_trace_machine_format, gobj_short_name, gobj_start, gobj_start_tree, gobj_stop, gobj_stop_children, gobj_subscribe_event, gobj_unsubscribe_event, gobj_write_attr, gobj_write_bool_attr, gobj_write_integer_attr, gobj_write_str_attr, gobj_yuno, gobj_yuno_name, is_array, is_boolean, is_date, is_gobj, is_null, is_number, is_object, is_string, json2flat, json_deep_copy, json_is_identical, json_object_size, json_object_update, json_object_update_missing, json_size, kw_clone_by_keys, kw_flag_t, kw_get_dict, kw_get_dict_value, kw_get_int, kw_get_local_storage_value, kw_get_str, kw_has_key, kw_set_dict_value, kw_set_local_storage_value, kwid_find_one_record, kwid_new_dict, log_error, log_warning, msg_iev_get_stack, parseBoolean, parseSVG, refresh_language, safeSrc, sdata_flag_t, set_console_log_enabled, set_log_callback, sprintf, str_in_list, template_get_field_desc, trace_level_t, trace_msg, treedb_decoder_fkey, treedb_encoder_fkey, treedb_get_field_desc, treedb_hook_data_size } from "@yuneta/gobj-js";
 import i18next, { t } from "i18next";
 import TomSelect from "tom-select";
 import { createJSONEditor } from "vanilla-jsoneditor";
@@ -919,6 +919,7 @@ var PRIVATE_DATA$22 = {
 	avatar_nodes: [],
 	translator: null,
 	conn_nodes: [],
+	connected: null,
 	active_dropdown: null
 };
 var __gclass__$22 = null;
@@ -2550,11 +2551,28 @@ function ac_nav_item_close(gobj, event, kw, src) {
 /***************************************************************
 *              FSM
 ***************************************************************/
+/***************************************************************
+*  EV_CONNECTION_STATE is an OPTIONAL fact: a view that waits for a
+*  backend answer subscribes to it by name. An app that subscribed
+*  to EVERY event of its shell with one attr (`subscriber`) did not
+*  ask for it and does not declare it -- published to it anyway, the
+*  event would be an FSM error in the app on every connection edge,
+*  and adding it to the shell a breaking change for every such app.
+*  So it reaches only the subscribers that declare it. Every other
+*  event of the shell goes out as before.
+***************************************************************/
+function mt_publication_pre_filter(gobj, subs, event, kw) {
+	if (event !== "EV_CONNECTION_STATE") return 1;
+	let subscriber = subs && subs.subscriber;
+	if (!subscriber || !gobj_has_event(subscriber, event, 0)) return 0;
+	return 1;
+}
 var gmt$22 = {
 	mt_create: mt_create$22,
 	mt_start: mt_start$20,
 	mt_stop: mt_stop$20,
-	mt_destroy: mt_destroy$22
+	mt_destroy: mt_destroy$22,
+	mt_publication_pre_filter
 };
 function create_gclass$22(gclass_name) {
 	if (__gclass__$22) {
@@ -2584,7 +2602,8 @@ function create_gclass$22(gclass_name) {
 		["EV_NAV_ITEM_CLOSE", event_flag_t.EVF_OUTPUT_EVENT | event_flag_t.EVF_PUBLIC_EVENT | event_flag_t.EVF_NO_WARN_SUBS],
 		["EV_ROUTE_REQUESTED", event_flag_t.EVF_OUTPUT_EVENT | event_flag_t.EVF_PUBLIC_EVENT | event_flag_t.EVF_NO_WARN_SUBS],
 		["EV_ROUTE_CHANGED", event_flag_t.EVF_OUTPUT_EVENT | event_flag_t.EVF_PUBLIC_EVENT | event_flag_t.EVF_NO_WARN_SUBS],
-		["EV_LANGUAGE_CHANGED", event_flag_t.EVF_OUTPUT_EVENT | event_flag_t.EVF_PUBLIC_EVENT | event_flag_t.EVF_NO_WARN_SUBS]
+		["EV_LANGUAGE_CHANGED", event_flag_t.EVF_OUTPUT_EVENT | event_flag_t.EVF_PUBLIC_EVENT | event_flag_t.EVF_NO_WARN_SUBS],
+		["EV_CONNECTION_STATE", event_flag_t.EVF_OUTPUT_EVENT | event_flag_t.EVF_NO_WARN_SUBS]
 	];
 	__gclass__$22 = gclass_create(gclass_name, event_types, states, gmt$22, 0, attrs_table$22, PRIVATE_DATA$22, 0, 0, 0, gclass_flag_t.gcflag_no_check_output_events);
 	if (!__gclass__$22) return -1;
@@ -2867,13 +2886,17 @@ function yui_shell_translate(shell_gobj, $el) {
 *  is-connected / is-disconnected classes; CSS owns the look.
 ************************************************************/
 function yui_shell_set_connection_state(shell_gobj, connected) {
+	if (!shell_gobj || !is_gobj(shell_gobj) || gobj_is_destroying(shell_gobj)) return;
 	let priv = shell_gobj.priv;
-	if (!priv || !is_array(priv.conn_nodes)) return;
+	if (!priv) return;
 	let on = !!connected;
-	for (let $n of priv.conn_nodes) {
+	let changed = priv.connected !== on;
+	priv.connected = on;
+	if (is_array(priv.conn_nodes)) for (let $n of priv.conn_nodes) {
 		$n.classList.toggle("is-connected", on);
 		$n.classList.toggle("is-disconnected", !on);
 	}
+	if (changed) gobj_publish_event(shell_gobj, "EV_CONNECTION_STATE", { connected: on });
 }
 /************************************************************
 *  Swap the icon of a toolbar item at runtime (host-driven,
@@ -7314,6 +7337,29 @@ function json_diff_rows(doc_a, doc_b) {
 *          them, and they must be each other's inverse: a writable time
 *          column travels back on EVERY save of the record.
 *
+*          KNOWN LIMIT -- the change of hour. A `datetime-local` holds a
+*          LOCAL WALL time and no offset, and a wall time is not always
+*          one instant:
+*
+*            - the night the clocks go back (autumn), one hour happens
+*              twice. "02:30" names two instants an hour apart, and
+*              `new Date("YYYY-MM-DDT02:30:00")` answers the EARLIER one
+*              (ECMAScript's "compatible" disambiguation). An epoch in the
+*              SECOND pass of that hour is shown as 02:30 and comes back
+*              one hour earlier: saving the record -- any field of it --
+*              moves a writable time column that holds it by -3600 s.
+*            - the night the clocks go forward (spring), one hour does not
+*              exist. No epoch is shown in it, so nothing read comes back
+*              wrong; a wall time TYPED in it is moved forward by the
+*              browser.
+*
+*          Not fixable here without the offset, which the input cannot
+*          carry. What is safe: a read-only time column never goes back
+*          (treedb_write_plan.js, col_goes_back_to_treedb), and a time
+*          pkey2 goes back as the record had it, never through this
+*          widget (instance_keys_of). A writable time column edited or
+*          merely saved inside the repeated hour is the exposed case.
+*
 *          Copyright (c) 2026, ArtGins.
 *          All Rights Reserved.
 ****************************************************************************/
@@ -23021,30 +23067,46 @@ function yui_shell_show_route_map(shell, opts) {
 *          form_writes_in_flight.js
 *
 *          The writes of topic forms a C_YUI_TREEDB_TOPICS view has sent
-*          and not yet answered, by their `form_write` serial. A form that
-*          waits for its answer (form_waits_for_answer) stays open and
-*          busy until the host answers, so the host has to answer EVERY
-*          way a write ends -- and the transport closing under a write in
-*          flight, or a command that never left because there was no
-*          session, are two of them that nobody answered: the form stayed
-*          busy for ever (N8 of the 2026-09-22 review).
+*          and not yet answered. A form that waits for its answer
+*          (form_waits_for_answer) stays open and busy until the host
+*          answers, so the host has to answer EVERY way a write ends --
+*          and the transport closing under a write in flight, or a
+*          command that never left because there was no session, are two
+*          of them that nobody answered: the form stayed busy for ever
+*          (N8 of the 2026-09-22 review).
+*
+*          A write is known by its TOPIC and its `form_write` serial,
+*          never by the serial alone: each topic has its own form, and
+*          each form counts its serials from 1. Keyed by the serial, two
+*          forms with a write in flight at once shared the key "1", the
+*          first answer settled both, and the transport closing then
+*          answered only one of them.
 *
 *          Copyright (c) 2026, ArtGins.
 *          All Rights Reserved.
 ***********************************************************************/
 /************************************************************
+*  The key of one write: `<topic>^<serial>`.
+************************************************************/
+function form_write_key(topic_name, form_write) {
+	return `${topic_name || ""}^${form_write}`;
+}
+/************************************************************
 *  A write left: remember whose it is
 ************************************************************/
 function track_form_write(in_flight, form_write, topic_name) {
 	if (!in_flight || !form_write) return;
-	in_flight[form_write] = topic_name || "";
+	in_flight[form_write_key(topic_name, form_write)] = {
+		form_write,
+		topic_name: topic_name || ""
+	};
 }
 /************************************************************
 *  A write was answered, one way or the other
 ************************************************************/
-function settle_form_write(in_flight, form_write) {
+function settle_form_write(in_flight, form_write, topic_name) {
 	if (!in_flight || !form_write) return;
-	delete in_flight[form_write];
+	delete in_flight[form_write_key(topic_name, form_write)];
 }
 /************************************************************
 *  Nothing in flight can be answered any more: take them all,
@@ -23053,12 +23115,13 @@ function settle_form_write(in_flight, form_write) {
 function abandon_form_writes(in_flight) {
 	const abandoned = [];
 	if (!in_flight) return abandoned;
-	Object.keys(in_flight).forEach((serial) => {
+	Object.keys(in_flight).forEach((key) => {
+		const w = in_flight[key];
 		abandoned.push({
-			form_write: Number(serial),
-			topic_name: in_flight[serial]
+			form_write: Number(w.form_write),
+			topic_name: w.topic_name
 		});
-		delete in_flight[serial];
+		delete in_flight[key];
 	});
 	return abandoned;
 }
@@ -23630,6 +23693,7 @@ var __gclass__$6 = null;
 ***************************************************************/
 function mt_create$6(gobj) {
 	gobj.priv.form_writes = {};
+	gobj.priv.conn_shell = null;
 	build_ui$6(gobj);
 	let subscriber = gobj_read_pointer_attr(gobj, "subscriber");
 	if (!subscriber) subscriber = gobj_parent(gobj);
@@ -23639,12 +23703,22 @@ function mt_create$6(gobj) {
 *          Framework Method: Start
 ***************************************************************/
 function mt_start$6(gobj) {
+	let shell = yui_shell_of(gobj);
+	if (shell) {
+		gobj_subscribe_event(shell, "EV_CONNECTION_STATE", {}, gobj);
+		gobj.priv.conn_shell = shell;
+	}
 	request_treedb_descs$1(gobj);
 }
 /***************************************************************
 *          Framework Method: Stop
 ***************************************************************/
 function mt_stop$6(gobj) {
+	let priv = gobj.priv;
+	if (priv.conn_shell) {
+		if (!gobj_is_destroying(priv.conn_shell)) gobj_unsubscribe_event(priv.conn_shell, "EV_CONNECTION_STATE", {}, gobj);
+		priv.conn_shell = null;
+	}
 	let shell = yui_shell_of(gobj);
 	if (shell) yui_shell_set_sub_routes(shell, gobj_read_str_attr(gobj, "base_route"), null);
 	close_json_viewer$1(gobj);
@@ -25050,7 +25124,7 @@ function ac_mt_command_answer$2(gobj, event, kw, src) {
 			if (command === "update-node" || command === "create-node") {
 				let failed_topic = kw_get_str(gobj, kw_command, "topic_name", "", 0);
 				if (failed_topic) gobj_send_event(gobj, "EV_REFRESH_TOPIC", { topic_name: failed_topic }, gobj);
-				settle_form_write(gobj.priv.form_writes, kw_get_int(gobj, kw_command, "form_write", 0, 0));
+				settle_form_write(gobj.priv.form_writes, kw_get_int(gobj, kw_command, "form_write", 0, 0), failed_topic);
 				answer_form_write(gobj, get_gobj_formtable(gobj, failed_topic), kw_get_int(gobj, kw_command, "form_write", 0, 0), false);
 			}
 		}
@@ -25088,7 +25162,7 @@ function ac_mt_command_answer$2(gobj, event, kw, src) {
 				created: command === "create-node",
 				command
 			});
-			settle_form_write(gobj.priv.form_writes, kw_get_int(gobj, kw_command, "form_write", 0, 0));
+			settle_form_write(gobj.priv.form_writes, kw_get_int(gobj, kw_command, "form_write", 0, 0), kw_get_str(gobj, kw_command, "topic_name", "", 0));
 			answer_form_write(gobj, get_gobj_formtable(gobj, kw_get_str(gobj, kw_command, "topic_name", "", 0)), kw_get_int(gobj, kw_command, "form_write", 0, 0), true);
 			break;
 		case "delete-node": break;
@@ -25232,11 +25306,19 @@ function ac_back_to_topics(gobj, event, kw, src) {
 	return 0;
 }
 /************************************************************
-*  The host (C_TREEDB_VIEW) forwards the backend transport edges here so the
-*  toolbar can disable the JSON viewers the moment the session drops (and
-*  re-enable them on reconnect) — the library view must not subscribe to the
-*  C_IEVENT_CLI itself (that forwards the subscription upstream and breaks
-*  the session).
+*  A backend transport edge, from either of two places:
+*    - EV_TRANSPORT_STATE, forwarded by a host that keeps one
+*      transport per view (gui_treedb's C_TREEDB_VIEW, gui_agent's
+*      C_AGENT_TREEDB_VIEW);
+*    - EV_CONNECTION_STATE, published by the SHELL when the app tells
+*      it its backend went up or down (yui_shell_set_connection_state),
+*      which is what every single-backend app already does for the
+*      toolbar dot. No host has to remember anything for this one.
+*  Both can arrive for one edge; what is done here is idempotent.
+*  The toolbar disables the JSON viewers the moment the session drops
+*  (and re-enables them on reconnect). The library view must not
+*  subscribe to the C_IEVENT_CLI itself: that forwards the subscription
+*  upstream and breaks the session.
 ************************************************************/
 function ac_transport_state$2(gobj, event, kw, src) {
 	let connected = !!(kw && kw.connected);
@@ -25768,6 +25850,11 @@ function create_gclass$6(gclass_name) {
 			"EV_TRANSPORT_STATE",
 			ac_transport_state$2,
 			null
+		],
+		[
+			"EV_CONNECTION_STATE",
+			ac_transport_state$2,
+			null
 		]
 	]]];
 	const event_types = [
@@ -25798,6 +25885,7 @@ function create_gclass$6(gclass_name) {
 		["EV_HIDE", 0],
 		["EV_BACK_TO_TOPICS", 0],
 		["EV_TRANSPORT_STATE", 0],
+		["EV_CONNECTION_STATE", 0],
 		["EV_TOPIC_SELECTED", event_flag_t.EVF_OUTPUT_EVENT | event_flag_t.EVF_NO_WARN_SUBS]
 	];
 	__gclass__$6 = gclass_create(gclass_name, event_types, states, gmt$6, 0, attrs_table$6, PRIVATE_DATA$6, 0, 0, 0, 0);
@@ -26515,6 +26603,23 @@ function col_goes_back_to_treedb(desc, col) {
 	if (field_desc.is_writable || field_desc.type === "fkey" || field_desc.is_file || col.id === pkey) return true;
 	return topic_pkey2s(d).includes(col.id);
 }
+/************************************************************
+*  The INSTANCE an update of `record` is for: its pkey2 values, as the
+*  record held them when the form was opened, {pkey2: value}.
+*
+*  They go back as they WERE, never as the form's widget hands them: a
+*  `time` pkey2 is an epoch rendered in a `datetime-local`, and a value
+*  that crossed the widget (seconds dropped, a local wall time read
+*  back, an hour the autumn change names twice) names ANOTHER instance
+*  -- or none, and C_NODE falls back to the primary. The pkey2 is an
+*  address, not a field of the edit.
+************************************************************/
+function instance_keys_of(record, desc) {
+	const keys = {};
+	if (!record || typeof record !== "object") return keys;
+	for (const k of topic_pkey2s(desc || {})) if (Object.prototype.hasOwnProperty.call(record, k) && record[k] !== void 0 && record[k] !== null) keys[k] = record[k];
+	return keys;
+}
 //#endregion
 //#region src/delete_impact.js
 /***********************************************************************
@@ -28246,6 +28351,7 @@ function open_form_dialog(gobj, mode, record) {
 		},
 		[]
 	]);
+	priv.form_instance = form_mode === "update" ? instance_keys_of(record, desc) : null;
 	let form_plan = write_plan(gobj);
 	let form = gobj_create_pure_child("form_" + clean_name(gobj_name(gobj)), "C_YUI_FORM", {
 		template: build_form_template(gobj),
@@ -28314,6 +28420,7 @@ function teardown_form_child(gobj) {
 	priv.reading_files = 0;
 	priv.awaiting_write = 0;
 	priv.form_busy = { busy: false };
+	priv.form_instance = null;
 	if (priv.form) {
 		if (gobj_is_running(priv.form)) gobj_stop(priv.form);
 		gobj_destroy(priv.form);
@@ -29573,6 +29680,7 @@ function publish_treedb_write(gobj, mode, record, jn_files, form_write) {
 		topic_name: gobj_read_str_attr(gobj, "topic_name"),
 		record: strip_read_only_cols(gobj, record)
 	};
+	if (mode !== "create" && gobj.priv.form_instance) Object.assign(kw_write.record, gobj.priv.form_instance);
 	if (form_write) kw_write.form_write = form_write;
 	if (jn_files && Object.keys(jn_files).length > 0) kw_write.record.__files__ = jn_files;
 	gobj_publish_event(gobj, mode === "create" ? "EV_CREATE_RECORD" : "EV_UPDATE_RECORD", kw_write);
@@ -70273,16 +70381,39 @@ function register_c_yui_treedb_schema() {
 *          __system__ still differed from the file in use (N13 of the
 *          2026-09-22 review). The host reads that difference from
 *          C_TREEDB's `saved-schema` (`draft_changed`, by treedb) and
-*          hands it here; the editor applies it to its model.
+*          hands it here; the editor applies it to its model, in place
+*          of what the host said before.
+*
+*          What `draft_changed` measures depends on the node: the draft
+*          against the SAVED schema on a node newer than yunetas 7.25.3,
+*          and against the file IN USE on a 7.25.3 node -- where a topic saved and
+*          not yet applied is still named, and the editor, which cannot
+*          tell the two apart, shows it as a draft until the Apply.
 *
 *          Copyright (c) 2026, ArtGins.
 *          All Rights Reserved.
 ***********************************************************************/
 /************************************************************
+*  The topics of `model` the host names as drafts, as
+*  {topic id: true}: `drafts` is {treedb_name: [topic names]}. A
+*  treedb or a topic the model does not hold is ignored.
+*
+*  What the editor keeps is THIS, apart from what its own session
+*  wrote, and replaced whole on every EV_DRAFTS: the host is the
+*  truth after a reload. Folded into the session's marks, a topic the
+*  host once named stayed a draft after the save that published it.
+************************************************************/
+function host_draft_ids(model, drafts) {
+	const ids = {};
+	mark_host_drafts(ids, model, drafts);
+	return ids;
+}
+/************************************************************
 *  Mark in `written` the topics of `model` the host names as
 *  drafts: `drafts` is {treedb_name: [topic names]}. A treedb or a
 *  topic the model does not hold is ignored. Returns how many were
-*  marked.
+*  marked. It only ADDS: a caller that must forget what the host
+*  no longer names starts from an empty map (host_draft_ids()).
 ************************************************************/
 function mark_host_drafts(written, model, drafts) {
 	let marked = 0;
@@ -71921,8 +72052,9 @@ function write_options(op) {
 *      the owner's design of M36 (2026-09-21 review) every write here
 *      raised both versions, so an edit half made was already the
 *      schema of the next start. The topic list marks what this session
-*      wrote and has not saved; the host's EV_REFRESH after a save is
-*      what forgets it.
+*      wrote and has not saved (the host's EV_REFRESH after a save is
+*      what forgets it) and what the host says is not saved (EV_DRAFTS,
+*      replaced whole each time it is sent).
 *
 *      WHAT ELSE IS HERE, and why each is here and not somewhere else:
 *
@@ -71964,6 +72096,12 @@ function write_options(op) {
 *      `update-node` / `delete-node` on the treedb service, and it may
 *      be a routing adapter two hops away (the agent console's
 *      C_AGENT_TREEDB_LINK) — this view cannot tell, and must not.
+*      A DROP of it (the host's EV_TRANSPORT_STATE, or a failure that
+*      arrives while the transport is out of session) ends the load or
+*      the write it cut, and the model is asked again when the session
+*      is back. Every request carries its round (`round` for a load,
+*      `write` for a write) in `__md_command__`, so an answer of what
+*      was cut is ignored instead of counted in the next one.
 *
 *          Copyright (c) 2026, ArtGins.
 *          All Rights Reserved.
@@ -71996,18 +72134,23 @@ var PRIVATE_DATA$1 = {
 	model: null,
 	pending: 0,
 	load_error: "",
+	load_round: 0,
 	treedb_id: "",
 	topic_name: "",
 	diagram: false,
 	baseline: null,
 	written: null,
+	host_drafts: null,
+	host_ids: null,
 	order_undo: null,
 	diagram_gobj: null,
 	dialog: null,
 	save_queue: null,
 	save_return: "",
 	save_wrote: false,
+	write_tag: 0,
 	connected: false,
+	reload_on_open: false,
 	pending_seg: null,
 	import_plan: null,
 	import_pane: null,
@@ -72025,6 +72168,7 @@ function mt_create$1(gobj) {
 	priv.baseline = {};
 	priv.written = {};
 	priv.host_drafts = {};
+	priv.host_ids = {};
 	priv.save_queue = [];
 	build_ui$1(gobj);
 	let subscriber = gobj_read_pointer_attr(gobj, "subscriber");
@@ -72177,6 +72321,7 @@ function request_model(gobj) {
 	};
 	priv.load_error = "";
 	priv.pending = 0;
+	priv.load_round++;
 	gobj_change_state(gobj, "ST_LOADING");
 	show_notice(gobj, "loading the schemas");
 	for (let topic_name of [
@@ -72186,7 +72331,7 @@ function request_model(gobj) {
 	]) if (remote_command(gobj, "nodes", {
 		topic_name,
 		options: { list_dict: true }
-	}) === 0) priv.pending++;
+	}, { round: priv.load_round }) === 0) priv.pending++;
 	if (priv.pending === 0) {
 		priv.load_error = t("cannot reach the treedb");
 		gobj_change_state(gobj, "ST_IDLE");
@@ -72204,7 +72349,7 @@ function request_model(gobj) {
 *  answer says which topic it is about, since the command is
 *  `nodes` for all three.
 ***************************************************************/
-function remote_command(gobj, command, kw) {
+function remote_command(gobj, command, kw, tag) {
 	let remote = gobj_read_pointer_attr(gobj, "gobj_remote_yuno");
 	let treedb_name = gobj_read_str_attr(gobj, "treedb_name");
 	if (!remote) {
@@ -72215,11 +72360,11 @@ function remote_command(gobj, command, kw) {
 		service: treedb_name,
 		treedb_name
 	}, kw || {});
-	full_kw.__md_command__ = {
+	full_kw.__md_command__ = Object.assign({
 		purpose: PURPOSE,
 		topic_name: kw && kw.topic_name || "",
 		record_id: kw && kw.record_id || ""
-	};
+	}, tag || {});
 	delete full_kw.record_id;
 	let ret = gobj_command(remote, command, full_kw, gobj);
 	if (ret) {
@@ -72264,25 +72409,33 @@ function start_measuring(gobj) {
 	let priv = gobj.priv;
 	priv.baseline = {};
 	priv.written = {};
+	priv.host_ids = {};
 	if (!priv.model) return;
 	for (let treedb of priv.model.treedbs) for (let topic of treedb.topics) priv.baseline[topic.id] = topic.topic_version;
-	mark_host_drafts(priv.written, priv.model, priv.host_drafts);
+	priv.host_ids = host_draft_ids(priv.model, priv.host_drafts);
 }
 /***************************************************************
-*  "This topic was written in this session and is not saved."
+*  "This topic holds an edit that is not saved."
 *
 *  An edit is a DRAFT: it moves no version and reaches no treedb
 *  until the host saves it (C_TREEDB's save-schema, which raises the
-*  versions of what changed) -- and the save makes the host send
-*  EV_REFRESH, whose reload is what forgets the drafts.
+*  versions of what changed). Two sources say a topic is one, and
+*  they are kept APART because they are forgotten differently:
+*    - `written`: what THIS session wrote since the model was loaded
+*      (a reload, the host's EV_REFRESH, forgets it -- the store says
+*      what is left);
+*    - `host_ids`: what the host said last (EV_DRAFTS), replaced WHOLE
+*      by the next EV_DRAFTS. Folded into `written`, a topic the host
+*      named once stayed a draft after the Save that published it.
 *
 *  ONE predicate, because it is asked in three places -- the topic
 *  list draws a chip with it, the column view a banner, the export
 *  a warning -- and copies of a rule are how they drift.
 ***************************************************************/
-function topic_is_draft(written, topic) {
-	if (!topic || !written) return false;
-	return written[topic.id] ? true : false;
+function topic_is_draft(priv, topic) {
+	if (!topic || !priv) return false;
+	if (priv.written && priv.written[topic.id]) return true;
+	return priv.host_ids && priv.host_ids[topic.id] ? true : false;
 }
 /***************************************************************
 *  Say what the whole store would be refused for.
@@ -72724,7 +72877,7 @@ function render_topics(gobj, $body) {
 	let twice = repeated_names(treedb.topics);
 	let $rows = [];
 	for (let topic of treedb.topics) {
-		let pending = topic_is_draft(priv.written, topic);
+		let pending = topic_is_draft(priv, topic);
 		let ambiguous = !!twice[topic.name];
 		let address = ambiguous ? topic.id : topic.name;
 		let $actions = [];
@@ -73047,7 +73200,7 @@ function render_columns(gobj, $body) {
 ***************************************************************/
 function draft_banner(gobj, topic) {
 	let priv = gobj.priv;
-	if (!topic_is_draft(priv.written, topic)) return null;
+	if (!topic_is_draft(priv, topic)) return null;
 	if (is_readonly(gobj)) return null;
 	return createElement2([
 		"div",
@@ -73937,7 +74090,7 @@ function open_report(gobj, findings, treedb_id) {
 ***************************************************************/
 function open_export(gobj, treedb) {
 	let priv = gobj.priv;
-	let drafts = treedb.topics.some((topic) => topic_is_draft(priv.written, topic));
+	let drafts = treedb.topics.some((topic) => topic_is_draft(priv, topic));
 	let c_text = schema_to_c(treedb);
 	let json_text = JSON.stringify(schema_to_json(treedb), null, 4);
 	let $content = createElement2([
@@ -74442,12 +74595,61 @@ function run_next_write(gobj) {
 	let write = priv.save_queue[0];
 	let command = write_command(write.op);
 	let options = write_options(write.op);
+	priv.write_tag++;
 	if (remote_command(gobj, command, {
 		topic_name: write.topic_name,
 		record: write.record,
 		options,
 		record_id: write.record.id || ""
-	}) < 0) return end_writes(gobj, t("cannot reach the treedb"));
+	}, { write: priv.write_tag }) < 0) return end_writes(gobj, t("cannot reach the treedb"));
+	return 0;
+}
+/***************************************************************
+*  Does the transport say it is in session? The state the library
+*  reads off every transport (C_IEVENT_CLI and the routing adapters
+*  name it the same).
+***************************************************************/
+function transport_in_session(gobj) {
+	let remote = gobj_read_pointer_attr(gobj, "gobj_remote_yuno");
+	return !!remote && gobj_current_state(remote) === "ST_SESSION";
+}
+/***************************************************************
+*  Is this answer of the load in flight, or of the write in
+*  flight? Each request carries its round in `__md_command__`, and
+*  one the drop abandoned (or a deadline settled) can still come
+*  back: counted, it ended the next load with the old data or
+*  moved the next write's queue.
+***************************************************************/
+function is_current_load(gobj, md) {
+	return gobj_current_state(gobj) === "ST_LOADING" && kw_get_int(gobj, md, "round", 0, 0) === gobj.priv.load_round;
+}
+function is_current_write(gobj, md) {
+	return gobj_current_state(gobj) === "ST_SAVING" && kw_get_int(gobj, md, "write", 0, 0) === gobj.priv.write_tag;
+}
+/***************************************************************
+*  The transport dropped under a load or a write: its answers
+*  will never come. The load goes back to the screen it replaced
+*  (or to "not connected" when there was none), the write ends
+*  with the drop said -- whether it landed is unknown -- and both
+*  mark the model to be asked again when the session is back.
+*  Bumping the round makes an answer of what was cut stale.
+***************************************************************/
+function transport_dropped(gobj) {
+	let priv = gobj.priv;
+	let state = gobj_current_state(gobj);
+	priv.reload_on_open = true;
+	if (state === "ST_SAVING") {
+		priv.write_tag++;
+		return end_writes(gobj, "the connection dropped during the write");
+	}
+	if (state === "ST_LOADING") {
+		priv.load_round++;
+		priv.pending = 0;
+		priv.load_error = "";
+		if (priv.model) return go(gobj, priv.treedb_id, priv.topic_name, priv.diagram, false);
+		gobj_change_state(gobj, "ST_IDLE");
+		render(gobj);
+	}
 	return 0;
 }
 /***************************************************************
@@ -74602,8 +74804,15 @@ function ac_mt_command_answer(gobj, event, kw, src) {
 	let kw_command = kw_get_dict(gobj, __command__, "kw", {}, 0);
 	let md = is_object(kw_command.__md_command__) ? kw_command.__md_command__ : kw_command;
 	if (kw_get_str(gobj, md, "purpose", "", 0) !== PURPOSE) return 0;
+	if (result < 0 && !transport_in_session(gobj) && (gobj_current_state(gobj) === "ST_LOADING" || gobj_current_state(gobj) === "ST_SAVING")) {
+		if (command === "nodes" && is_current_load(gobj, md) || command !== "nodes" && is_current_write(gobj, md)) return transport_dropped(gobj);
+	}
 	if (command === "nodes") {
 		let topic_name = kw_get_str(gobj, md, "topic_name", "", 0);
+		if (!is_current_load(gobj, md)) {
+			log_warning(`${gobj_short_name(gobj)}: 'nodes' of '${topic_name}' answered for a load that is over: ignored`);
+			return 0;
+		}
 		priv.pending--;
 		if (result < 0) priv.load_error = comment || t("cannot load the schemas");
 		else if (priv.records && Array.isArray(priv.records[topic_name])) priv.records[topic_name] = Array.isArray(data) ? data : [];
@@ -74621,6 +74830,10 @@ function ac_mt_command_answer(gobj, event, kw, src) {
 	}
 	if (command === "update-node" || command === "delete-node") {
 		let topic_name = kw_get_str(gobj, md, "topic_name", "", 0);
+		if (!is_current_write(gobj, md)) {
+			log_warning(`${gobj_short_name(gobj)}: '${command}' of '${topic_name}' answered for a write that is over (result ${result}): ignored`);
+			return 0;
+		}
 		if (result < 0) return end_writes(gobj, comment || t("the treedb refused the write"));
 		priv.save_wrote = true;
 		if (command === "delete-node") forget_record(gobj, topic_name, kw_get_str(gobj, md, "record_id", "", 0));
@@ -74680,14 +74893,28 @@ function ac_hide(gobj, event, kw, src) {
 	return 0;
 }
 /***************************************************************
-*  The session came up or went down. The model stays either way
-*  — a schema does not change under you — but a first load may
-*  have had no transport to run on.
+*  The session came up or went down. The model stays -- a schema
+*  does not change under you -- unless the drop cut a load or a
+*  write (transport_dropped()): then it is asked again on the way
+*  back, as it is when a first load had no transport to run on.
+*
+*  Nothing else ends a load or a write the drop cut: their answers
+*  will never come, and waiting in ST_LOADING skipped the reload
+*  itself (M-1 of the independent review of 7.25.4).
 ***************************************************************/
 function ac_transport_state(gobj, event, kw, src) {
 	let priv = gobj.priv;
+	let state = gobj_current_state(gobj);
 	priv.connected = !!(kw && kw.connected);
-	if (priv.connected && !priv.model && gobj_current_state(gobj) !== "ST_LOADING") return request_model(gobj);
+	if (!priv.connected) {
+		if (state === "ST_LOADING" || state === "ST_SAVING") return transport_dropped(gobj);
+		render_toolbar(gobj);
+		return 0;
+	}
+	if ((!priv.model || priv.reload_on_open) && state !== "ST_LOADING" && state !== "ST_SAVING") {
+		priv.reload_on_open = false;
+		return request_model(gobj);
+	}
 	render_toolbar(gobj);
 	return 0;
 }
@@ -74705,18 +74932,22 @@ function ac_refresh$1(gobj, event, kw, src) {
 }
 /***************************************************************
 *  {drafts: {treedb_name: [topic names]}} -- the host says which
-*  topics hold a draft in __system__ that the file in use does not
-*  have (C_TREEDB's saved-schema, `draft_changed`). The mark of a
-*  write lived in this session's memory only, so a reload of the
-*  page, a reconnect or a refresh showed no draft while __system__
-*  still differed from the file (N13 of the 2026-09-22 review).
-*  Replaces what the host said before; what this session wrote
-*  stays marked.
+*  topics hold a draft in __system__ that is not saved (C_TREEDB's
+*  saved-schema, `draft_changed`). The mark of a write lived in this
+*  session's memory only, so a reload of the page, a reconnect or a
+*  refresh showed no draft while __system__ still differed (N13 of
+*  the 2026-09-22 review).
+*
+*  REPLACES what the host said before -- the host is the truth after
+*  a reload, and a Save is exactly the host saying "none any more".
+*  It only ever added, and a topic stayed a draft after the Save that
+*  published it (M1 of the 2026-09-23 review). What this session wrote
+*  stays marked: it is kept apart (see topic_is_draft()).
 ***************************************************************/
 function ac_drafts(gobj, event, kw, src) {
 	let priv = gobj.priv;
 	priv.host_drafts = kw && kw.drafts && typeof kw.drafts === "object" ? kw.drafts : {};
-	mark_host_drafts(priv.written, priv.model, priv.host_drafts);
+	priv.host_ids = host_draft_ids(priv.model, priv.host_drafts);
 	if (priv.model) render(gobj);
 	return 0;
 }