@almadar/std 16.234.0 → 16.236.0

package/behaviors/lolo/infra/atoms/std-rate-limiter.lolo

@@ -21,6 +21,7 @@ orbital RateBucketOrbital {
     count : number @description "The current value of a counter." @synonyms "value, amount, total" = 0
     window : number @description "The duration of the rate limiting window, in seconds." @synonyms "duration, time, interval, period" = 0
     limiterStatus : string @description "Current operational state of the rate limiter." @synonyms "state, condition, mode" = open
+    limit : number @description "Requests this bucket admits per window before it throttles; set from requestsPerMinute when the limiter mounts." @synonyms "cap, quota, ceiling, maximum requests" = 60
   }
 
   trait ShieldIcon = Icon.traits.IconRender -> RateBucket {
@@ -77,7 +78,7 @@ orbital RateBucketOrbital {
 
   trait CountMeter = Meter.traits.MeterRender -> RateBucket {
     config {
-      max: 100
+      max: @entity.limit
       min: 0
       value: @entity.count
     }
@@ -85,7 +86,7 @@ orbital RateBucketOrbital {
 
   trait CountProgressBar = ProgressBar.traits.ProgressBarRender -> RateBucket {
     config {
-      max: 100
+      max: @entity.limit
       showPercentage: true
       value: @entity.count
     }
@@ -136,6 +137,7 @@ orbital RateBucketOrbital {
       INIT -> open
         (set @entity.count 0)
         (set @entity.window 60)
+        (set @entity.limit @config.requestsPerMinute)
         (set @entity.limiterStatus open)
         (render-ui main {
           children: [{
@@ -162,7 +164,36 @@ orbital RateBucketOrbital {
           gap: lg
           type: stack
         })
-      REQUEST -> open when @config.enabled
+      REQUEST -> throttled when (and @config.enabled (>= (+ @entity.count 1) @entity.limit))
+        (set @entity.count (+ @entity.count 1))
+        (set @entity.limiterStatus throttled)
+        (render-ui main {
+          children: [{
+            align: center
+            children: [{
+              align: center
+              children: [@trait.ShieldIcon, @trait.RateBucketTitle]
+              direction: horizontal
+              gap: md
+              type: stack
+            }, @trait.ThrottledStatusDot]
+            direction: horizontal
+            gap: md
+            justify: between
+            type: stack
+          }, @trait.RateBucketDivider, @trait.RateLimitAlert, @trait.StatsGrid, @trait.CountMeter, {
+            children: [@trait.ResetPrimaryButton]
+            direction: horizontal
+            gap: sm
+            justify: center
+            type: stack
+          }]
+          direction: vertical
+          gap: lg
+          type: stack
+        })
+      REQUEST -> open when (and @config.enabled (< (+ @entity.count 1) @entity.limit))
+        (set @entity.count (+ @entity.count 1))
         (render-ui main {
           children: [{
             align: center
@@ -243,9 +274,43 @@ orbital RateBucketOrbital {
           gap: lg
           type: stack
         })
+      WINDOW_ELAPSED -> open
+        (set @entity.count 0)
+      CONFIGURE -> open
+        (set @entity.limit ?limit)
     }
 
     state throttled {
+      CONFIGURE -> throttled
+        (set @entity.limit ?limit)
+      WINDOW_ELAPSED -> open
+        (set @entity.limiterStatus open)
+        (set @entity.count 0)
+        (render-ui main {
+          children: [{
+            align: center
+            children: [{
+              align: center
+              children: [@trait.ShieldIcon, @trait.RateBucketTitle]
+              direction: horizontal
+              gap: md
+              type: stack
+            }, @trait.OpenStatusDot]
+            direction: horizontal
+            gap: md
+            justify: between
+            type: stack
+          }, @trait.RateBucketDivider, @trait.StatsGrid, @trait.CountMeter, @trait.CountProgressBar, {
+            children: [@trait.RequestButton, @trait.ResetButton]
+            direction: horizontal
+            gap: sm
+            justify: center
+            type: stack
+          }]
+          direction: vertical
+          gap: lg
+          type: stack
+        })
       RESET -> open
         (set @entity.limiterStatus open)
         (set @entity.count 0)
@@ -303,9 +368,21 @@ orbital RateBucketOrbital {
     }
 
     listens {
-      RequestButton.REQUEST -> REQUEST
-      ResetButton.RESET -> RESET
-      ResetPrimaryButton.RESET -> RESET
+      CONFIGURE {
+        limit : number
+      }
+        @description "Sets this bucket's limit (requests per window), e.g. from the host row's own rate limit."
+    }
+
+    ticks {
+      windowElapsed every 1m
+        (emit WINDOW_ELAPSED)
+    }
+
+    emits {
+      WINDOW_ELAPSED -> internal {
+      }
+        @description "One rate-limit window (a minute) has elapsed; the request count starts over."
     }
 
     config {
@@ -316,24 +393,9 @@ orbital RateBucketOrbital {
         @tier "domain"
       requestsPerMinute : number = 60
         @label "Requests per minute"
-        @description "Maximum number of requests allowed per minute before throttling begins."
+        @description "Requests a bucket admits per one-minute window; the next request throttles it, and each elapsed minute (or RESET) reopens it."
         @synonyms "rate limit, request cap, RPS, throttle threshold"
         @tier "domain"
-      burstSize : number = 10
-        @label "Burst size"
-        @description "Requests allowed to burst above the per-minute rate before steady-state throttling kicks in. Lower burst = strict/no-spikes; higher burst = forgiving/allow-spikes."
-        @synonyms "burst capacity, allowance, spike allowance, no-spike (low) vs allow-bursts (high)"
-        @tier "domain"
-      keyStrategy : "ip" | "user" | "api-key" | "global" = user
-        @label "Rate-limit key strategy"
-        @description "What identifier the per-bucket counter is keyed on: source IP, authenticated user, API key, or one global bucket."
-        @synonyms "limiter key, bucket key"
-        @tier "domain"
-      overrideRoles : [string] = []
-        @label "Override roles"
-        @description "Roles exempt from rate limiting (e.g. internal services, admin override). Empty = no exemptions."
-        @synonyms "exempt roles, bypass list"
-        @tier "domain"
       statLook : "elevated" | "flat" | "progress-backed" | "gauge" | "sparkline" = elevated
         @label "Stat display look"
         @description "Layer 2 visual treatment for stat / KPI cards."

package/behaviors/lolo/infra/atoms/std-status-lifecycle.lolo

@@ -20,7 +20,7 @@ orbital StatusLifecycleOrbital {
     initial: idle
 
     state idle {
-      ChangeStatusRequested -> idle when (and @config.enabled (array/some @config.transitions (fn t (and ["=", (object/get @t from), ?from] ["=", (object/get @t to), ?to]))))
+      ChangeStatusRequested -> idle when (and @config.enabled (array/includes @config.states ?to) (array/some @config.transitions (fn t (and ["=", (object/get @t from), ?from] ["=", (object/get @t to), ?to]))))
         (persist update @config.targetEntity (object/set { id: ?id } @config.statusField ?to) {
           emit: { failure: StatusChangeFailed, success: StatusPersisted }
         })
@@ -74,11 +74,6 @@ orbital StatusLifecycleOrbital {
         @description "Entity field this lifecycle drives (e.g. 'status', 'state', 'stage', 'phase')."
         @synonyms "state field, stage field, status column, lifecycle field"
         @tier "infra"
-      initialStatus : string = "draft"
-        @label "What status do new records start in?"
-        @description "The status assigned when a record is first created."
-        @synonyms "starting state, default status, first stage, initial state"
-        @tier "domain"
       states : [string] = (draft active archived)
         @label "What are the possible statuses?"
         @description "The complete set of statuses a record can hold."

package/behaviors/lolo/ml/atoms/std-graph-builder.lolo

@@ -54,7 +54,8 @@ orbital GraphBuilderOrbital {
               nodes: @nodes,
               edges: @edges,
               nodeCount: (array/len @nodes),
-              edgeCount: (array/len @edges)
+              edgeCount: (array/len @edges),
+              directed: @config.directed
             })))
     }
 
@@ -75,6 +76,7 @@ orbital GraphBuilderOrbital {
         edges : [GraphBuilderEdge]!
         nodeCount : int!
         edgeCount : int!
+        directed : boolean!
       }
         @description "Fired when node/edge structures have been built from the source entity collection"
         @tier "primary"

package/behaviors/lolo/ml/atoms/std-ml-classify.lolo

@@ -30,10 +30,6 @@ orbital MlClassifyOrbital {
         @label "Categories"
         @description "Closed set of category labels the LLM must choose from"
         @tier "domain"
-      provider : string = ""
-        @label "Provider"
-        @description "Reserved for provider selection; LLMServiceActions.classify (packages/almadar-llm/src/contracts.ts) takes no provider param today, so this knob is not forwarded to the call"
-        @tier "infra"
       model : string = ""
         @label "Model"
         @description "Model override forwarded to the classify call"

package/behaviors/lolo/ml/atoms/std-ml-similarity.lolo

@@ -38,10 +38,6 @@ orbital MlSimilarityOrbital {
         @label "Match margin"
         @description "Minimum gap between the best and second-best score required to trust the match"
         @tier "policy"
-      embedModel : string = ""
-        @label "Embedding model"
-        @description "Reserved for embedding-model selection; llm/embed takes only a texts array today, so this knob is not yet wired into the call"
-        @tier "infra"
     }
 
     state idle {

package/behaviors/lolo/ui/avl/atoms/ui-avl-state-machine.lolo

@@ -27,6 +27,12 @@ orbital AvlStateMachineOrbital {
     type : string!
     args : [SExpr]!
   }
+  type AvlStateMachineTRANSITIONCLICKTransition = {
+    index : number!
+    event : string!
+    from : string!
+    to : string!
+  }
 
   entity AvlStateMachineItem [runtime] {
     id : string!
@@ -44,6 +50,7 @@ orbital AvlStateMachineOrbital {
           visitedStates: @config.visitedStates
           stateClickEvent: @config.stateClickEvent
           transitionClickEvent: @config.transitionClickEvent
+          onTransitionClick: @config.onTransitionClick
           selectedState: @config.selectedState
           pendingSourceState: @config.pendingSourceState
           nodeShape: @config.nodeShape
@@ -66,6 +73,7 @@ orbital AvlStateMachineOrbital {
         event : string!
         from : string!
         to : string!
+        transition : AvlStateMachineTRANSITIONCLICKTransition
       }
         @description "Emits UI:{transitionClickEvent} with { index, event, from, to } when a transition label is clicked."
         @tier "essential"
@@ -97,6 +105,10 @@ orbital AvlStateMachineOrbital {
         @label "Transition Click Event"
         @description "Emits UI:{transitionClickEvent} with { index, event, from, to } when a transition label is clicked."
         @tier "presentation"
+      onTransitionClick : event = "TRANSITION_CLICK"
+        @label "On Transition Click"
+        @description "Direct transition-click callback, for React hosts (e.g. a canvas node)."
+        @tier "presentation"
       selectedState : string
         @label "Selected State"
         @description "State picked in an editor (first click)."

package/behaviors/lolo/ui/core/atoms/std-app-layout.lolo

@@ -1,8 +1,8 @@
 app std-app-layout "1.4.1"
 "std-app-layout — dashboard-layout chrome (sidebar nav + top bar with search + topBarActions + notifications) wrapping a single contentTrait slot. Use for list-style apps (CMS / helpdesk / CRM) and account/settings pages: the chrome stays stable while the consumer's content trait renders the data, and the consumer can add domain icons (cart / profile / help) via topBarActions. Bind once per orbital — the consumer rebinds linkedEntity via `XAppLayout = AppShell.traits.AppLayout -> XEntity` so multiple orbitals in one file each get their own chrome without colliding on a shared atom entity."
 ;; @capabilities "settings page shell, preferences page, account settings layout, profile settings, admin console shell"
-type NavItem = { label : string!, href : string!, icon : string, badge : string, children : [NavItem] }
-type ItemAction = { label : string!, event : event, navigatesTo : string, variant : string, icon : string }
+type NavItem = { label : string!, href : string!, icon : string, badge : string, children : [NavItem], roles : [string] }
+type ItemAction = { label : string!, event : event, navigatesTo : string, variant : string, icon : string, roles : [string] }
 type NotificationSpec = { id : string, message : string, variant : string }
 orbital AppLayoutOrbital {
     type AppLayoutStateLoaded = Event { data : [AppLayoutData] }
@@ -17,7 +17,7 @@ orbital AppLayoutOrbital {
     initial: composing
 
     state composing {
-      INIT -> composing
+      INIT -> composing when (or (= (array/len @config.allowedRoles) 0) (array/includes @config.allowedRoles @config.viewerRole))
         (fetch AppLayoutData {
           emit: { failure: AppLayoutStateLoadFailed, success: AppLayoutStateLoaded }
         })
@@ -37,12 +37,47 @@ orbital AppLayoutOrbital {
             }]
             currentPath: @config.currentPath
             layoutMode: @config.layoutMode
-            navItems: @config.navItems
+            navItems: (array/map (array/filter @config.navItems (fn item (or (= (array/len (object/get @item roles [])) 0) (array/includes (object/get @item roles []) @config.viewerRole)))) (fn item (if (object/has @item children) (object/merge @item { children: (array/filter (object/get @item children []) (fn child (or (= (array/len (object/get @child roles [])) 0) (array/includes (object/get @child roles []) @config.viewerRole)))) }) @item)))
             notificationClickEvent: @config.notificationClickEvent
             notifications: @config.notifications
             searchEvent: @config.searchEvent
             sidebarContent: @config.sidebarTrait
-            topBarActions: @config.topBarActions
+            topBarActions: (array/filter @config.topBarActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+            type: @config.layoutPattern
+            user: (if @config.viewerName { avatar: @config.viewerAvatar, email: @config.viewerEmail, name: @config.viewerName } null)
+          }]
+        })
+      INIT -> composing when (not (or (= (array/len @config.allowedRoles) 0) (array/includes @config.allowedRoles @config.viewerRole)))
+        (fetch AppLayoutData {
+          emit: { failure: AppLayoutStateLoadFailed, success: AppLayoutStateLoaded }
+        })
+        (render-ui main {
+          data-theme: @config.theme
+          className: "min-h-screen w-full"
+          fullHeight: true
+          type: box
+          children: [{
+            appName: @config.appName
+            children: [{
+              children: [{
+                description: @config.accessDeniedDescription
+                icon: lock
+                title: @config.accessDeniedTitle
+                type: empty-state
+              }]
+              className: @config.contentClassName
+              direction: vertical
+              gap: lg
+              type: stack
+            }]
+            currentPath: @config.currentPath
+            layoutMode: @config.layoutMode
+            navItems: (array/map (array/filter @config.navItems (fn item (or (= (array/len (object/get @item roles [])) 0) (array/includes (object/get @item roles []) @config.viewerRole)))) (fn item (if (object/has @item children) (object/merge @item { children: (array/filter (object/get @item children []) (fn child (or (= (array/len (object/get @child roles [])) 0) (array/includes (object/get @child roles []) @config.viewerRole)))) }) @item)))
+            notificationClickEvent: @config.notificationClickEvent
+            notifications: @config.notifications
+            searchEvent: @config.searchEvent
+            sidebarContent: @config.sidebarTrait
+            topBarActions: (array/filter @config.topBarActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
             type: @config.layoutPattern
             user: (if @config.viewerName { avatar: @config.viewerAvatar, email: @config.viewerEmail, name: @config.viewerName } null)
           }]
@@ -147,10 +182,6 @@ orbital AppLayoutOrbital {
         @description "sidebar = left rail; topnav = top bar; bottomnav = mobile tab bar; minimal = no nav."
         @synonyms "nav position, navigation style, menu placement, layout style"
         @tier "presentation"
-      detailSlot : slot = modal
-        @label "Detail slot"
-        @description "Slot where detail/edit views render"
-        @tier "internal"
       currentPath : string = ""
         @label "Current path"
         @description "Nav-highlight ONLY: which nav item to mark active. This is NOT the page route — it does not change what page loads or where the orbital lives. To set the landing route or a page path, use the orbital's pagePath / page path, not this knob. When omitted, the layout reads the current route."
@@ -160,6 +191,21 @@ orbital AppLayoutOrbital {
         @label "Content wrapper class"
         @description "CSS class applied to the content area wrapper."
         @tier "internal"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The signed-in viewer's role that allowedRoles and each nav item's / top-bar action's `roles` are checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only items with no `roles` show and a page with allowedRoles is denied."
+        @tier "policy"
+      allowedRoles : [string] = []
+        @label "Who may open this page?"
+        @description "Roles (matched against viewerRole) allowed to see this page's content. Empty = everyone; anyone else sees the access-denied state instead. Nav items and top-bar actions carry their own `roles` the same way."
+        @synonyms "access, permission, restrict, only for, roles allowed, who can see"
+        @tier "policy"
+      accessDeniedTitle : string = "You don't have access to this page"
+        @label "Access-denied title"
+        @tier "presentation"
+      accessDeniedDescription : string = "Ask an administrator if you need it."
+        @label "Access-denied message"
+        @tier "presentation"
       theme : string = @currentTheme
         @label "Theme"
         @description "Data-theme attribute applied to the layout root (e.g. almadar-website-dark)."

package/behaviors/lolo/ui/core/atoms/std-app-search.lolo

@@ -1,7 +1,7 @@
 app std-app-search "1.0.0"
 "std-app-search — reusable global search: wraps a host content view and, on a SEARCH trigger, fetches the linked entity filtered by @config.searchField and renders the matching results, then CLEAR_SEARCH returns to the host view. Rebind to any entity; point @config.idleContent at the normal view and wire a trigger (e.g. AppLayout SEARCH) into SEARCH."
 type AppSearchFieldSpec = { name : string!, label : string, variant : h3 | h4 | body | caption | badge | small | progress, icon : string, format : date | currency | number | boolean | percent, event : string, href : string, payload : string, disabled : boolean, confirm : string, hidden : boolean }
-type AppSearchActionSpec = { label : string!, event : event!, variant : primary | secondary | ghost | danger, icon : string, href : string, payload : string, disabled : boolean, confirm : string, hidden : boolean }
+type AppSearchActionSpec = { label : string!, event : event!, variant : primary | secondary | ghost | danger, icon : string, href : string, payload : string, disabled : boolean, confirm : string, hidden : boolean, roles : [string] }
 orbital AppSearchOrbital {
   type AppSearchLoaded = Event { data : [AppSearchTarget] } "Filtered search results loaded"
   type AppSearchFailed = Event { error : string } "Search fetch failed"
@@ -127,7 +127,7 @@ orbital AppSearchOrbital {
             type: data-grid
             entity: @payload.data
             fields: @config.resultFields
-            itemActions: @config.resultActions
+            itemActions: (array/filter @config.resultActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           }]
         })
       AppSearchFailed -> idle
@@ -224,6 +224,10 @@ orbital AppSearchOrbital {
         @label "Result row actions"
         @description "Optional per-row actions on a result, e.g. { label: \"View Details\", event: \"VIEW\" }."
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The signed-in viewer's role that each action's `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/atoms/std-billable-hour.lolo

@@ -1,8 +1,12 @@
 app std-billable-hour "1.0.0"
 "std-billable-hour — generic billable-hour timesheet primitive for legal, agency, and consulting domains. Lists entries in `browsing`; opens entry detail in `viewing_single` with Invoice / Write Off actions."
-type ItemAction = { label : string!, event : event, navigatesTo : string, variant : string, icon : string }
+type ItemAction = { label : string!, event : event, navigatesTo : string, variant : string, icon : string, roles : [string], when : SExpr }
 type ColumnSpec = { key : string!, field : string, header : string, width : string, align : string, className : string, weight : string, format : string, icon : string }
 orbital BillableHourOrbital {
+  uses RoleGate from "std/behaviors/std-role-gate"
+
+  uses Button from "std/behaviors/ui-button"
+
   uses TableView from "std/behaviors/ui-table-view"
 
     type BillableHourLoaded = Event { data : [BillableHour] } "Fired when the billable-hour collection finishes loading"
@@ -28,6 +32,7 @@ orbital BillableHourOrbital {
       columns: @config.columns
       emptyMessage: "No time entries"
       itemActions: @config.itemActions
+      viewerRole: @config.viewerRole
       look: @config.tableLook
       maxInlineActions: 2
       selfFetch: false
@@ -199,19 +204,7 @@ orbital BillableHourOrbital {
             type: simple-grid
           }, {
             align: center
-            children: [{
-              action: INVOICE_HOURS
-              actionPayload: { id: @entity.id }
-              label: Invoice
-              type: button
-              variant: primary
-            }, {
-              action: WRITE_OFF_HOURS
-              actionPayload: { id: @entity.id }
-              label: "Write Off"
-              type: button
-              variant: danger
-            }]
+            children: [<RoleGate.traits.RoleGate linkedEntity={BillableHour} roles={@config.invoiceRoles} viewerRole={@config.viewerRole} content={<Button.traits.ButtonRender linkedEntity={BillableHour} action={INVOICE_HOURS} actionPayload={{ id: ?row.id }} label={Invoice} variant={primary} />} />, <RoleGate.traits.RoleGate linkedEntity={BillableHour} roles={@config.writeOffRoles} viewerRole={@config.viewerRole} content={<Button.traits.ButtonRender linkedEntity={BillableHour} action={WRITE_OFF_HOURS} actionPayload={{ id: ?row.id }} label={"Write Off"} variant={danger} />} />]
             direction: horizontal
             gap: sm
             type: stack
@@ -448,10 +441,22 @@ orbital BillableHourOrbital {
         @label "Row actions"
         @description "Per-row actions rendered by the hours table."
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The signed-in viewer's role that each action's `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only actions with no `roles` show."
+        @tier "policy"
       statLook : "elevated" | "flat" | "progress-backed" | "gauge" | "sparkline" = elevated
         @label "Stat display look"
         @description "Layer 2 visual treatment for stat / KPI cards."
         @tier "presentation"
+      invoiceRoles : [string] = []
+        @label "Roles that can invoice"
+        @description "Roles (matched against viewerRole) that see the Invoice button. Empty = everyone."
+        @tier "policy"
+      writeOffRoles : [string] = []
+        @label "Roles that can write off"
+        @description "Roles (matched against viewerRole) that see the Write Off button. Empty = everyone."
+        @tier "policy"
     }
   }