dexie-cloud-addon 4.4.5 → 4.4.6

package/dist/modern/dexie-cloud-addon.js

@@ -8,7 +8,7 @@
  *
  * ==========================================================================
  *
- * Version 4.4.5, Wed Mar 25 2026
+ * Version 4.4.6, Thu Mar 26 2026
  *
  * https://dexie.org
  *
@@ -3759,6 +3759,16 @@ function applyServerChanges(changes, db) {
                         }
                         break;
                     case 'update':
+                        if (!primaryKey.outbound && primaryKey.keyPath) {
+                            // The primary key should never be part of an updateSpec — it cannot change
+                            // and is already communicated via the operation's keys array.
+                            // For private singleton IDs (e.g. "#key:userId" on server, "#key" on client),
+                            // the encoded server-side key may leak into the changeSpec via getObjectDiff().
+                            // Strip it here unconditionally as a defensive measure.
+                            for (const changeSpec of mut.changeSpecs) {
+                                Dexie.delByKeyPath(changeSpec, primaryKey.keyPath);
+                            }
+                        }
                         yield bulkUpdate(table, keys, mut.changeSpecs);
                         break;
                     case 'delete':
@@ -8377,7 +8387,7 @@ function dexieCloud(dexie) {
     const downloading$ = createDownloadingState();
     dexie.cloud = {
         // @ts-ignore
-        version: "4.4.5",
+        version: "4.4.6",
         options: Object.assign({}, DEFAULT_OPTIONS),
         schema: null,
         get currentUserId() {
@@ -8804,7 +8814,7 @@ function dexieCloud(dexie) {
     }
 }
 // @ts-ignore
-dexieCloud.version = "4.4.5";
+dexieCloud.version = "4.4.6";
 Dexie.Cloud = dexieCloud;
 
 export { dexieCloud as default, defineYDocTrigger, dexieCloud, getTiedObjectId, getTiedRealmId, resolveText };