@abloatai/ablo 0.9.14 → 0.9.15

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.9.15
+
+### Patch Changes
+
+- Package metadata: set the npm description to "The Collaboration Layer For AI Agents" (matching the GitHub repo About) so it stops reverting to the old "State control API…" text on publish.
+
 ## 0.9.14
 
 ### Patch Changes

package/dist/Model.js

@@ -78,11 +78,19 @@ export class Model {
                 ? data.createdAt
                 : new Date(data.createdAt)
             : new Date();
+        // A record that arrives WITH `createdAt` but WITHOUT `updatedAt` is
+        // server/IDB data whose update timestamp didn't survive the wire —
+        // falling back to "now" here fabricated an edit time for every such
+        // record on every bootstrap (the decks gallery sorted everything to
+        // "edited just now"). Fall back to createdAt instead; only a genuinely
+        // new local model (no dates at all) stamps the current time.
         this.updatedAt = data.updatedAt
             ? data.updatedAt instanceof Date
                 ? data.updatedAt
                 : new Date(data.updatedAt)
-            : new Date();
+            : data.createdAt
+                ? new Date(this.createdAt)
+                : new Date();
         this.syncStatus = data.syncStatus || 'pending';
     }
     /**

package/dist/environment.d.ts

@@ -0,0 +1,12 @@
+import { z } from 'zod';
+export declare const ENVIRONMENTS: readonly ["production", "sandbox"];
+export type KeyPrefixEnvironment = 'live' | 'test';
+export declare const environmentSchema: z.ZodEnum<{
+    production: "production";
+    sandbox: "sandbox";
+}>;
+export type Environment = z.infer<typeof environmentSchema>;
+export declare function normalizeEnvironment(value: unknown, fallback?: Environment): Environment;
+export declare function environmentFromKeyPrefix(value: KeyPrefixEnvironment): Environment;
+export declare function environmentToKeyPrefix(value: Environment): KeyPrefixEnvironment;
+export declare function isSandboxEnvironment(value: Environment): boolean;

package/dist/environment.js

@@ -0,0 +1,16 @@
+import { z } from 'zod';
+export const ENVIRONMENTS = ['production', 'sandbox'];
+export const environmentSchema = z.enum(ENVIRONMENTS);
+export function normalizeEnvironment(value, fallback = 'production') {
+    const parsed = environmentSchema.safeParse(value);
+    return parsed.success ? parsed.data : fallback;
+}
+export function environmentFromKeyPrefix(value) {
+    return value === 'test' ? 'sandbox' : 'production';
+}
+export function environmentToKeyPrefix(value) {
+    return value === 'sandbox' ? 'test' : 'live';
+}
+export function isSandboxEnvironment(value) {
+    return value === 'sandbox';
+}

package/dist/index.d.ts

@@ -64,6 +64,8 @@ export { SyncSessionError, AbloError, AbloAuthenticationError, AbloPermissionErr
 export type { CommitReceipt, RequiredCapability } from './errors.js';
 export type { ErrorCode, WireErrorCode, ErrorCategory, ErrorCodeSpec, RecoveryClass } from './errors.js';
 export { WS_BEARER_SUBPROTOCOL_PREFIX, WS_SYNC_SUBPROTOCOL } from './auth/credentialSource.js';
+export { ENVIRONMENTS, environmentSchema, normalizeEnvironment, environmentFromKeyPrefix, environmentToKeyPrefix, isSandboxEnvironment, } from './environment.js';
+export type { Environment, KeyPrefixEnvironment } from './environment.js';
 export { writeOptionsSchema, onStaleModeSchema, assertWriteOptions, } from './client/writeOptionsSchema.js';
 export type { WriteOptionsInput } from './client/writeOptionsSchema.js';
 export type { WriteOptions, MutationOptions } from './interfaces/index.js';

package/dist/index.js

@@ -89,6 +89,7 @@ export { defaultPolicy, capabilityPreemptPolicy } from './policy/index.js';
 // `e.type === 'AbloX'`) plus the HTTP-response translator.
 export { SyncSessionError, AbloError, AbloAuthenticationError, AbloPermissionError, AbloRateLimitError, AbloIdempotencyError, AbloConnectionError, AbloValidationError, AbloServerError, AbloStaleContextError, AbloClaimedError, CapabilityError, translateHttpError, hasWireCode, errorFromWire, toAbloError, ERROR_CODES, ERROR_CONTRACT_VERSION, errorCodeSpec, isRetryableCode, classifyRecovery, recoveryClassSchema, RECOVERY_CLASSES, } from './errors.js';
 export { WS_BEARER_SUBPROTOCOL_PREFIX, WS_SYNC_SUBPROTOCOL } from './auth/credentialSource.js';
+export { ENVIRONMENTS, environmentSchema, normalizeEnvironment, environmentFromKeyPrefix, environmentToKeyPrefix, isSandboxEnvironment, } from './environment.js';
 // THE write-options contract — the one Zod schema for the option bag every
 // write door accepts (`ablo.<model>.create/update/delete`, `commits.create`,
 // the HTTP model routes). The SDK validates against it at each boundary;

package/dist/keys/index.d.ts

@@ -10,16 +10,19 @@
  * client bundle never pulls in `node:crypto`.
  *
  * Format (GitHub-style): `<sk|rk|ek>_<live|test>_<30 base62 body><6-char
- * base62 CRC32 checksum>`. The identifiable prefix + CRC32 checksum let
+ * base62 CRC32 checksum>`. The environment segment is the stable key-prefix
+ * contract; parsed values are immediately mapped to `production` / `sandbox`.
+ * The identifiable prefix + CRC32 checksum let
  * secret scanners detect leaks and let us reject typo'd/forged keys OFFLINE
  * (no DB round-trip). Legacy keys (a ~43-char base64url body, no checksum)
  * still validate by hash — they parse here as `checksummed: false`.
  */
 import { z } from 'zod';
+import { type Environment } from '../environment.js';
 export declare const API_KEY_KINDS: readonly ["secret", "restricted", "ephemeral", "publishable"];
 export type ApiKeyKind = (typeof API_KEY_KINDS)[number];
-export declare const API_KEY_ENVS: readonly ["live", "test"];
-export type ApiKeyEnv = (typeof API_KEY_ENVS)[number];
+export declare const API_KEY_ENVS: readonly ["production", "sandbox"];
+export type ApiKeyEnv = Environment;
 /** A structurally-valid Ablo API key, parsed into its parts. */
 export interface ParsedApiKey {
     /** The original plaintext. */

package/dist/keys/index.js

@@ -10,13 +10,16 @@
  * client bundle never pulls in `node:crypto`.
  *
  * Format (GitHub-style): `<sk|rk|ek>_<live|test>_<30 base62 body><6-char
- * base62 CRC32 checksum>`. The identifiable prefix + CRC32 checksum let
+ * base62 CRC32 checksum>`. The environment segment is the stable key-prefix
+ * contract; parsed values are immediately mapped to `production` / `sandbox`.
+ * The identifiable prefix + CRC32 checksum let
  * secret scanners detect leaks and let us reject typo'd/forged keys OFFLINE
  * (no DB round-trip). Legacy keys (a ~43-char base64url body, no checksum)
  * still validate by hash — they parse here as `checksummed: false`.
  */
 import { createHash, randomBytes } from 'node:crypto';
 import { z } from 'zod';
+import { ENVIRONMENTS, environmentFromKeyPrefix, environmentToKeyPrefix, } from '../environment.js';
 // ── Vocabulary ──────────────────────────────────────────────────────────
 // The Stripe-style key model:
 //   secret (sk_)      — backend / server-to-server / agents. Full authority. Never in a browser.
@@ -29,7 +32,7 @@ import { z } from 'zod';
 //                       it; it grants read access to the org's data plane and cannot write
 //                       or reach any control-plane operation.
 export const API_KEY_KINDS = ['secret', 'restricted', 'ephemeral', 'publishable'];
-export const API_KEY_ENVS = ['live', 'test'];
+export const API_KEY_ENVS = ENVIRONMENTS;
 const PREFIX_BY_KIND = {
     secret: 'sk',
     restricted: 'rk',
@@ -115,7 +118,13 @@ export const apiKeySchema = z.string().transform((raw, ctx) => {
         ctx.addIssue({ code: 'custom', message: 'API key checksum mismatch' });
         return z.NEVER;
     }
-    return { raw, kind: KIND_BY_PREFIX[prefix], env: env, body, checksummed };
+    return {
+        raw,
+        kind: KIND_BY_PREFIX[prefix],
+        env: environmentFromKeyPrefix(env),
+        body,
+        checksummed,
+    };
 });
 // ── Derived validators (thin wrappers over the same spec) ───────────────
 /** Parse + fully validate (incl. checksum). Returns null when invalid. */
@@ -140,9 +149,9 @@ export function keyChecksumMatches(raw) {
  * Mint a key: `<prefix>_<env>_<body><checksum>`. Returns the plaintext (shown
  * once), its SHA-256 hash (persisted), and the 12-char display prefix.
  */
-export function generateApiKey(env = 'live', kind = 'secret') {
+export function generateApiKey(env = 'production', kind = 'secret') {
     const body = randomBase62(KEY_BODY_LEN);
-    const payload = `${PREFIX_BY_KIND[kind]}_${env}_${body}`;
+    const payload = `${PREFIX_BY_KIND[kind]}_${environmentToKeyPrefix(env)}_${body}`;
     const plaintext = `${payload}${checksum6(payload)}`;
     return { plaintext, hash: hashApiKey(plaintext), prefix: plaintext.slice(0, 12) };
 }

package/dist/transactions/TransactionQueue.js

@@ -949,6 +949,12 @@ export class TransactionQueue extends EventEmitter {
                     // Ensure derived fields exist (covers restored/persisted transactions)
                     this.ensureDerivedFields(a);
                     this.ensureDerivedFields(b);
+                    if (a.modelName === b.modelName && a.modelId === b.modelId && a.type !== b.type) {
+                        if (a.type === 'create')
+                            return -1;
+                        if (b.type === 'create')
+                            return 1;
+                    }
                     return a.priorityScore - b.priorityScore;
                 });
                 // Get batch (now guaranteed to have parent entities before children)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@abloatai/ablo",
-  "version": "0.9.14",
-  "description": "State control API for AI agents and collaborative apps.",
+  "version": "0.9.15",
+  "description": "The Collaboration Layer For AI Agents",
   "license": "Apache-2.0",
   "type": "module",
   "engines": {
@@ -83,6 +83,11 @@
       "import": "./dist/keys/index.js",
       "default": "./dist/keys/index.js"
     },
+    "./environment": {
+      "types": "./dist/environment.d.ts",
+      "import": "./dist/environment.js",
+      "default": "./dist/environment.js"
+    },
     "./wire": {
       "types": "./dist/wire/index.d.ts",
       "import": "./dist/wire/index.js",