wip: federated updated_at disposition; confirmation roster entry

Claude-Session: https://claude.ai/code/session_01Utp6Cb2FL7H75wB1wA6PpZ
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/cli/test/migrate-confirmation-exit.pin.test.ts

@@ -290,6 +290,7 @@ const ROSTER: Record<string, Member> = {
     writes: BOOT,
   },
   'security-catalog-overlays': { argv: ['--apply'], confirm: '--yes', writes: BOOT },
+  'stored-expressions': { argv: ['--apply'], confirm: '--yes', writes: BOOT },
   'summary-nulls': { argv: ['--apply'], confirm: '--yes', writes: BOOT },
   'value-shapes': { argv: ['--apply'], confirm: '--yes', writes: BOOT },
 };

packages/objectql/src/federated-injected-column-readers.test.ts

@@ -377,6 +377,14 @@ const READERS: Record<string, Row> = {
     disposition: 'skips',
     why: 'the recompute reads the stamp its apply keeps, and leaves the column out of its read (and its write) on a federated object',
   },
+  'stored-expression-backfill.ts#backfillStoredExpressions :: isFederatedUnprovisionedInjectedColumn()': {
+    disposition: 'skips',
+    why: 'the backfill never sends an injected column a federated object does not provision',
+  },
+  'stored-expression-backfill.ts#backfillStoredExpressions :: updated_at': {
+    disposition: 'skips',
+    why: 'the backfill keeps the stamp of the row it writes, and sends none on a federated object',
+  },
   'engine-migration-state.ts#recordObservedDeviation :: updated_at': { disposition: 'not-a-read', why: PLATFORM_ROW },
   'engine-migration-state.ts#retractCreationAttestation :: updated_at': { disposition: 'not-a-read', why: PLATFORM_ROW },
   'plugin.ts#reconcileFederatedBindings :: isFederatedObject()': { disposition: 'not-a-read', why: SYNC_ROUTE },
@@ -703,7 +711,7 @@ describe('[#21918] every engine reader of an injected column has a disposition t
     }
   }, SCAN_BUDGET_MS);
 
-  it('the sites that skip are exactly the cascade scan, its plan, the organization-delete count, the lifecycle tenant partition, and the home-amount recompute', () => {
+  it('the sites that skip are exactly the cascade scan, its plan, the organization-delete count, the lifecycle tenant partition, the home-amount recompute and the stored-expression backfill', () => {
     const skipping = new Set(
       Object.entries(READERS)
         .filter(([, row]) => row.disposition === 'skips')
@@ -715,6 +723,7 @@ describe('[#21918] every engine reader of an injected column has a disposition t
       'engine-cascade-planning.ts#planCascadeAtomicity',
       'home-amount-recompute.ts#recomputeHomeAmounts',
       'lifecycle/lifecycle-service.ts#tenantWindowsFor',
+      'stored-expression-backfill.ts#backfillStoredExpressions',
     ]);
   });
 

packages/objectql/src/stored-expression-backfill.ts

@@ -70,6 +70,7 @@ import { keysetWalk, type KeysetPageQuery } from '@objectstack/types';
 import { objectNotFoundError, withTransientRetry, type RetryOptions } from '@objectstack/core';
 
 import { planStoredExpressions } from './engine-top-level.js';
+import { isFederatedUnprovisionedInjectedColumn } from './federated-object.js';
 
 /** The engine surface the run needs: the declarations, a read, the stored-expression computation and the update. */
 export interface StoredExpressionBackfillEngine {
@@ -347,7 +348,9 @@ export async function backfillStoredExpressions(
       outcomes.set(field, outcome);
       report.fields.push(outcome);
     }
-    const hasUpdatedAt = 'updated_at' in (engine.getObject(object)?.fields ?? {});
+    // The stamp the apply keeps; a federated object's injected columns are not provisioned, so its write sends none.
+    const schema = engine.getObject(object);
+    const hasUpdatedAt = 'updated_at' in (schema?.fields ?? {}) && !isFederatedUnprovisionedInjectedColumn(schema, 'updated_at');
 
     // Seek by `id`: this run's claim is about EVERY stored row, which an offset walk cannot promise.
     const walk = keysetWalk<Record<string, unknown>>(