@anchrd/intel-ui 0.19.0 → 0.21.0

package/src/graph-pane/graph-pane.tsx

@@ -1,4 +1,4 @@
-import type { RelationGraph } from "@anchrd/intel-contract";
+import type { RelationGraph } from "@anchrd/intel-contract/flow";
 import type { UseQueryResult } from "@tanstack/react-query";
 import { lazy, Suspense } from "react";
 import { useI18n } from "@/i18n/i18n-context.tsx";

package/src/i18n/de.json

@@ -112,6 +112,14 @@
   "node.share": "Freigeben",
   "node.shareAction": "Zugriff geben",
   "node.email": "E-Mail-Adresse",
+  "node.emailHint": "Intel kann nicht prüfen, ob hinter dieser Adresse ein Konto steht. Die Freigabe greift, sobald sich jemand damit anmeldet — auch nach einer späteren Registrierung.",
+  "node.shareWith": "Wer Zugriff bekommt",
+  "node.shareWithEmail": "Eine E-Mail-Adresse",
+  "node.shareWithOrganization": "Alle in der Organisation",
+  "node.shareOrganizationHint": "Jedes angemeldete Mitglied der Organisation bekommt diesen Zugriff, auch wer später dazukommt.",
+  "node.shareLibraryWarning": "Ausführen für die ganze Organisation macht diesen Ordner zu einer Bibliothek: Flows von überall im Baum dürfen dann hineinrufen. Das Zurücknehmen wird abgelehnt, solange einer davon es noch tut.",
+  "node.revokeInUse": "Dieser Zugriff lässt sich noch nicht zurücknehmen, weil Flows außerhalb dieses Ordners noch hineinrufen.",
+  "node.someUser": "Ein Benutzerkonto",
   "node.verbs": "Was diese Freigabe erlaubt",
   "node.verb.read": "Lesen",
   "node.verb.write": "Schreiben",
@@ -167,7 +175,9 @@
   "tools.connectExpiredHelp": "Die Verbindung zum MCP-Portal der Firma muss innerhalb weniger Minuten abgeschlossen sein, und diese lief ab, während die Freigabe-Seite offen stand. Es ist nichts schiefgegangen und nichts wurde verweigert — starte erneut und bestätige die Server, wenn die Seite erscheint.",
   "tools.connectRetry": "Erneut starten",
   "tools.connectFailed": "Anmeldung am Portal fehlgeschlagen",
-  "tools.connectFailedHelp": "Die Anmeldung am MCP-Portal der Firma brach ab, bevor sie beantwortet werden konnte. Das ist ein technischer Fehler, keine Entscheidung über deinen Zugriff — lade neu für einen weiteren Versuch, und sag der Administration Bescheid, wenn es bleibt.",
+  "tools.connectFailedHelp": "Die Anmeldung am MCP-Portal der Firma brach ab, bevor sie beantwortet werden konnte. Das ist ein technischer Fehler, keine Entscheidung über deinen Zugriff — starte sie erneut, und sag der Administration Bescheid, wenn es bleibt.",
+  "tools.connectUnknown": "Intel weiß nicht, ob du das Portal erreichst",
+  "tools.connectUnknownHelp": "In dieser Browsersitzung wurde eine Anmeldung am MCP-Portal der Firma gestartet, die nie mit einer Antwort zurückkam. Deshalb steht hier weder, dass du zugelassen wurdest, noch, dass du abgelehnt wurdest. Starte sie erneut; wenn es dabei bleibt, sag der Administration Bescheid.",
   "tools.origin": "Herkunft",
   "tools.originUnlisted": "Nicht von einem gelisteten Server",
   "tools.originUnlistedHelp": "Die Serverliste des Portals nennt für diese keinen Server. Seine eigenen Verwaltungswerkzeuge liegen hier — das Portal listet sich nicht selbst — und ebenso alles von einem Server, den die Liste nicht erwähnt hat.",
@@ -283,6 +293,14 @@
   "settings.appearance.system": "Dem System folgen",
   "settings.appearance.light": "Hell",
   "settings.appearance.dark": "Dunkel",
+  "reindex.title": "Suchindex neu aufbauen",
+  "reindex.description": "Liest jeden Knoten noch einmal und ermittelt seine Sucheinträge von Grund auf. Es geht nichts verloren — der Index entsteht aus den Dokumenten selbst —, aber es kostet Zeit und Geld, und danach sieht der Bildschirm genauso aus.",
+  "reindex.confirm": "Neu aufbauen",
+  "reindex.running": "Wird gesendet …",
+  "reindex.cancel": "Abbrechen",
+  "reindex.close": "Schließen",
+  "reindex.queued": "{count} Knoten sind eingereiht. Der Index zieht im Hintergrund nach; die Suche funktioniert währenddessen weiter.",
+  "reindex.failed": "Der Neuaufbau wurde nicht gestartet. Prüfe deine Berechtigung und versuche es noch einmal.",
   "auth.signOut": "Abmelden",
   "auth.signOutFailed": "Das Abmelden ist fehlgeschlagen. Prüfe deine Verbindung und versuche es erneut.",
   "signIn.refusedTitle": "Angemeldet, aber nicht angenommen",
@@ -294,6 +312,7 @@
   "common.save": "Speichern",
   "common.saving": "Wird gespeichert …",
   "common.saved": "Gespeichert",
+  "common.saveNothing": "Nichts zu speichern",
   "common.saveDirty": "Ungespeicherte Änderungen speichern",
   "common.unsavedTitle": "Ungespeicherte Änderungen",
   "common.unsavedBody": "Hier gibt es Änderungen, die nicht gespeichert wurden. Wer jetzt geht, verwirft sie.",
@@ -302,5 +321,7 @@
   "common.loading": "Wird geladen …",
   "common.retry": "Erneut versuchen",
   "common.close": "Schließen",
-  "common.unavailable": "Intel ist derzeit nicht verfügbar."
+  "common.unavailable": "Intel ist derzeit nicht verfügbar.",
+  "common.noAccess": "Das ist für dich nicht verfügbar. Es existiert nicht, oder es ist nicht mehr für dich freigegeben.",
+  "common.noPermission": "Dir fehlt die Berechtigung, das zu sehen."
 }

package/src/i18n/en.json

@@ -112,6 +112,14 @@
   "node.share": "Share",
   "node.shareAction": "Grant access",
   "node.email": "Email address",
+  "node.emailHint": "Intel cannot check whether an account exists behind this address. The grant takes effect as soon as somebody signs in with it — including after they register.",
+  "node.shareWith": "Who gets access",
+  "node.shareWithEmail": "One email address",
+  "node.shareWithOrganization": "Everyone in the organization",
+  "node.shareOrganizationHint": "Every signed-in member of the organization gets this access, including people who join later.",
+  "node.shareLibraryWarning": "Run for the whole organization makes this folder a library: flows anywhere in the tree may then call into it. Taking it back is refused while any of them still does.",
+  "node.revokeInUse": "This access cannot be withdrawn yet, because flows outside this folder still call into it.",
+  "node.someUser": "A user account",
   "node.verbs": "What this grant allows",
   "node.verb.read": "Read",
   "node.verb.write": "Write",
@@ -167,7 +175,9 @@
   "tools.connectExpiredHelp": "The connection to the company MCP portal has to be completed within a few minutes, and this one ran out while the authorization screen was open. Nothing went wrong and nothing was refused — start it again and confirm the servers when the screen appears.",
   "tools.connectRetry": "Start again",
   "tools.connectFailed": "Portal sign-in failed",
-  "tools.connectFailedHelp": "The sign-in to the company MCP portal broke before it could be answered. This is a technical fault, not a decision about your access — reload to try again, and tell an administrator if it stays.",
+  "tools.connectFailedHelp": "The sign-in to the company MCP portal broke before it could be answered. This is a technical fault, not a decision about your access — start it again, and tell an administrator if it stays.",
+  "tools.connectUnknown": "Intel does not know whether you reach the portal",
+  "tools.connectUnknownHelp": "A sign-in to the company MCP portal was started in this browser session and never came back with an answer, so nothing here says you were allowed or refused. Start it again; if it keeps ending here, tell an administrator.",
   "tools.origin": "Origin",
   "tools.originUnlisted": "Not from a listed server",
   "tools.originUnlistedHelp": "The portal's server list names no server for these. Its own management tools sit here — the portal does not list itself — and so does anything from a server the list did not mention.",
@@ -283,6 +293,14 @@
   "settings.appearance.system": "Follow the system",
   "settings.appearance.light": "Light",
   "settings.appearance.dark": "Dark",
+  "reindex.title": "Rebuild the search index",
+  "reindex.description": "Reads every node again and works out its search entries from scratch. Nothing is lost — the index is built from the documents themselves — but it costs time and money, and the screen looks the same afterwards.",
+  "reindex.confirm": "Rebuild",
+  "reindex.running": "Sending…",
+  "reindex.cancel": "Cancel",
+  "reindex.close": "Close",
+  "reindex.queued": "{count} nodes are queued. The index catches up in the background; searching keeps working meanwhile.",
+  "reindex.failed": "The rebuild was not started. Check your access and try again.",
   "auth.signOut": "Sign out",
   "auth.signOutFailed": "Signing out failed. Check your connection and try again.",
   "signIn.refusedTitle": "Signed in, but not accepted",
@@ -294,6 +312,7 @@
   "common.save": "Save",
   "common.saving": "Saving…",
   "common.saved": "Saved",
+  "common.saveNothing": "Nothing to save",
   "common.saveDirty": "Save unsaved changes",
   "common.unsavedTitle": "Unsaved changes",
   "common.unsavedBody": "This has changes that have not been saved. Leaving now discards them.",
@@ -302,5 +321,7 @@
   "common.loading": "Loading…",
   "common.retry": "Try again",
   "common.close": "Close",
-  "common.unavailable": "Intel is currently unavailable."
+  "common.unavailable": "Intel is currently unavailable.",
+  "common.noAccess": "This is not available to you. It may not exist, or it may no longer be shared with you.",
+  "common.noPermission": "You do not have permission to see this."
 }

package/src/i18n/es.json

@@ -112,6 +112,14 @@
   "node.share": "Compartir",
   "node.shareAction": "Conceder acceso",
   "node.email": "Dirección de correo",
+  "node.emailHint": "Intel no puede comprobar si existe una cuenta detrás de esta dirección. El permiso surte efecto en cuanto alguien inicie sesión con ella, incluso si se registra más tarde.",
+  "node.shareWith": "Quién obtiene acceso",
+  "node.shareWithEmail": "Una dirección de correo",
+  "node.shareWithOrganization": "Todos en la organización",
+  "node.shareOrganizationHint": "Todos los miembros de la organización que hayan iniciado sesión obtienen este acceso, incluidos quienes se incorporen más tarde.",
+  "node.shareLibraryWarning": "Ejecutar para toda la organización convierte esta carpeta en una biblioteca: los flujos de cualquier parte del árbol podrán invocarla. Retirarlo se rechaza mientras alguno siga haciéndolo.",
+  "node.revokeInUse": "Este acceso todavía no se puede retirar, porque hay flujos fuera de esta carpeta que siguen invocándola.",
+  "node.someUser": "Una cuenta de usuario",
   "node.verbs": "Qué permite este acceso",
   "node.verb.read": "Leer",
   "node.verb.write": "Escribir",
@@ -167,7 +175,9 @@
   "tools.connectExpiredHelp": "La conexión con el portal MCP de la empresa tiene que completarse en unos minutos, y esta se ha agotado mientras la pantalla de autorización estaba abierta. No ha fallado nada ni se ha denegado nada — vuelve a empezar y confirma los servidores cuando aparezca la pantalla.",
   "tools.connectRetry": "Empezar de nuevo",
   "tools.connectFailed": "El inicio de sesión en el portal ha fallado",
-  "tools.connectFailedHelp": "El inicio de sesión en el portal MCP de la empresa se ha interrumpido antes de poder responderse. Es un fallo técnico, no una decisión sobre tu acceso — recarga para intentarlo otra vez y avisa a la administración si persiste.",
+  "tools.connectFailedHelp": "El inicio de sesión en el portal MCP de la empresa se ha interrumpido antes de poder responderse. Es un fallo técnico, no una decisión sobre tu acceso — vuelve a empezar y avisa a la administración si persiste.",
+  "tools.connectUnknown": "Intel no sabe si llegas al portal",
+  "tools.connectUnknownHelp": "En esta sesión del navegador se inició un acceso al portal MCP de la empresa que nunca volvió con una respuesta, así que aquí no dice ni que se te haya permitido ni que se te haya denegado. Vuelve a empezar; si sigue acabando aquí, avisa a la administración.",
   "tools.origin": "Origen",
   "tools.originUnlisted": "No procede de un servidor listado",
   "tools.originUnlistedHelp": "La lista de servidores del portal no nombra ningún servidor para estas. Aquí están sus propias herramientas de gestión — el portal no se lista a sí mismo — y también todo lo que venga de un servidor que la lista no mencionó.",
@@ -283,6 +293,14 @@
   "settings.appearance.system": "Seguir al sistema",
   "settings.appearance.light": "Claro",
   "settings.appearance.dark": "Oscuro",
+  "reindex.title": "Reconstruir el índice de búsqueda",
+  "reindex.description": "Vuelve a leer cada nodo y calcula sus entradas de búsqueda desde cero. No se pierde nada — el índice se construye a partir de los propios documentos —, pero cuesta tiempo y dinero, y después la pantalla se ve igual.",
+  "reindex.confirm": "Reconstruir",
+  "reindex.running": "Enviando…",
+  "reindex.cancel": "Cancelar",
+  "reindex.close": "Cerrar",
+  "reindex.queued": "{count} nodos están en cola. El índice se pone al día en segundo plano; mientras tanto la búsqueda sigue funcionando.",
+  "reindex.failed": "No se inició la reconstrucción. Comprueba tu acceso e inténtalo de nuevo.",
   "auth.signOut": "Cerrar sesión",
   "auth.signOutFailed": "El cierre de sesión ha fallado. Comprueba tu conexión e inténtalo de nuevo.",
   "signIn.refusedTitle": "Sesión iniciada, pero no aceptada",
@@ -294,6 +312,7 @@
   "common.save": "Guardar",
   "common.saving": "Guardando…",
   "common.saved": "Guardado",
+  "common.saveNothing": "Nada que guardar",
   "common.saveDirty": "Guardar los cambios sin guardar",
   "common.unsavedTitle": "Cambios sin guardar",
   "common.unsavedBody": "Esto tiene cambios que no se han guardado. Si sales ahora, se descartan.",
@@ -302,5 +321,7 @@
   "common.loading": "Cargando…",
   "common.retry": "Intentarlo de nuevo",
   "common.close": "Cerrar",
-  "common.unavailable": "Intel no está disponible en este momento."
+  "common.unavailable": "Intel no está disponible en este momento.",
+  "common.noAccess": "Esto no está disponible para ti. Puede que no exista o que ya no esté compartido contigo.",
+  "common.noPermission": "No tienes permiso para ver esto."
 }

package/src/main.tsx

@@ -1,4 +1,4 @@
-import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { QueryClientProvider } from "@tanstack/react-query";
 import { RouterProvider } from "@tanstack/react-router";
 import { StrictMode } from "react";
 import { createRoot } from "react-dom/client";
@@ -6,6 +6,7 @@ import {
   createIntelDataProvider,
   loginPath,
 } from "@/data/intel-data-provider/intel-data-provider.ts";
+import { createIntelQueryClient } from "@/data/query-client.ts";
 import { createBrowserSignIn, createSignInGuard } from "@/data/sign-in/sign-in.ts";
 import { I18nProvider } from "@/i18n/i18n-context.tsx";
 import { createLanguages } from "@/i18n/i18n-languages/i18n-languages.ts";
@@ -32,7 +33,7 @@ if (!root) throw new Error("Missing #root element");
 const languages = createLanguages({ store: window.localStorage });
 const signIn = createBrowserSignIn(loginPath);
 const mounted = createRoot(root);
-const queryClient = new QueryClient();
+const queryClient = createIntelQueryClient();
 
 // The shell is painted from a function because a refused sign-in has to replace it, and that
 // refusal arrives from inside a fetch rather than from React.

package/src/node-editor/node-editor.tsx

@@ -4,7 +4,7 @@ import {
   DocumentLinkInlineType,
   type Node,
   type NodeDocument,
-} from "@anchrd/intel-contract";
+} from "@anchrd/intel-contract/node";
 import { filterSuggestionItems } from "@blocknote/core";
 import { SuggestionMenuController, useCreateBlockNote } from "@blocknote/react";
 import { useMutation, useQuery } from "@tanstack/react-query";
@@ -120,6 +120,11 @@ export function NodeEditor({
         mediaType: BlockNoteMediaType,
         idempotencyKey: crypto.randomUUID(),
       });
+      // ⚠️ An answer that carries no version did not save anything (#432). Letting it through would
+      // move `savedSnapshot` forward, drop the unsaved warning and leave the reader free to close
+      // the tab — over a document the server still reports as empty. It belongs on the error path,
+      // which is the one place the screen already says that the writing failed.
+      if (!node.version) throw new Error("save_without_version");
       // ⚠️ The snapshot of what was SENT, not of what stands in the editor when the answer comes
       // back. Saving crosses the network, and typing during it is normal — taking the state at
       // arrival would call that typing saved and lose it at the next navigation.
@@ -162,7 +167,15 @@ export function NodeEditor({
           because this is where `dirty` lives — moving the state up to the screen would mean the
           screen tracking every keystroke in an editor it does not own. */}
       <ActionSlot name="title-actions">
-        <SaveButton dirty={dirty} saving={save.isPending} onSave={() => save.mutate()} />
+        {/* ⚠️ `stored` comes from the document the screen holds, not from a flag this component
+            sets on success: it turns true when the answer that carried a version has reached the
+            query cache, and never a moment earlier (#432). */}
+        <SaveButton
+          dirty={dirty}
+          saving={save.isPending}
+          stored={document.version !== null}
+          onSave={() => save.mutate()}
+        />
       </ActionSlot>
       <UnsavedChangesGuard dirty={dirty} />
       {save.isError && (

package/src/node-graph/graph-notice.tsx

@@ -1,4 +1,4 @@
-import type { RelationGraph } from "@anchrd/intel-contract";
+import type { RelationGraph } from "@anchrd/intel-contract/flow";
 import type { I18n } from "@/i18n/i18n.types.ts";
 
 /**

package/src/node-graph/node-graph.ts

@@ -1,4 +1,4 @@
-import type { RelationGraph } from "@anchrd/intel-contract";
+import type { RelationGraph } from "@anchrd/intel-contract/flow";
 import Color from "colorjs.io";
 import { MultiDirectedGraph } from "graphology";
 

package/src/node-graph/node-graph.tsx

@@ -1,4 +1,4 @@
-import type { RelationGraph } from "@anchrd/intel-contract";
+import type { RelationGraph } from "@anchrd/intel-contract/flow";
 import { ControlsContainer, SigmaContainer, useCamera, useRegisterEvents } from "@react-sigma/core";
 import { LocateFixed, Minus, Plus } from "lucide-react";
 import { useEffect, useMemo } from "react";

package/src/node-table/node-table.tsx

@@ -1,4 +1,4 @@
-import type { Node } from "@anchrd/intel-contract";
+import type { Node } from "@anchrd/intel-contract/node";
 import { useMutation, useQuery } from "@tanstack/react-query";
 import { Download } from "lucide-react";
 import { ActionSlot } from "@/app/action-slot/action-slot.tsx";
@@ -9,8 +9,8 @@ import { useIntelRouterContext } from "@/router/router-context.ts";
  * A table as a grid (#40).
  *
  * Reading is the whole of the first cut: there is no cell editor, and rows arrive through
- * `node_table_append` — the point of the kind is that a flow or an MCP client fills it without a
- * person retyping anything. Editing in the grid is anchrd/intel#165.
+ * `node_table_row_create` — the point of the kind is that a flow or an MCP client fills it
+ * without a person retyping anything. Editing in the grid is anchrd/intel#165.
  *
  * ⚠️ The rows are the server's answer, parsed by the server's one CSV reader. A second reader here
  * would eventually disagree with it about a quoted comma, and the grid would then show something

package/src/nodes/nodes.tsx

@@ -1,4 +1,4 @@
-import type { Node } from "@anchrd/intel-contract";
+import type { Node } from "@anchrd/intel-contract/node";
 import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 import { useNavigate, useRouterState } from "@tanstack/react-router";
 import { Download, History, Paperclip } from "lucide-react";
@@ -6,6 +6,7 @@ import { lazy, Suspense, useState } from "react";
 import { ActionSlot } from "@/app/action-slot/action-slot.tsx";
 import { ViewToggle } from "@/app/view-toggle/view-toggle.tsx";
 import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from "@/components/ui/tooltip";
+import { refusalOf } from "@/data/request-refusal/request-refusal.ts";
 import { FolderContents } from "@/folder-contents/folder-contents.tsx";
 import { GraphPane } from "@/graph-pane/graph-pane.tsx";
 import { useI18n } from "@/i18n/i18n-context.tsx";
@@ -39,6 +40,10 @@ export function Nodes() {
     enabled: Boolean(selectedId),
   });
   const selected = document.data?.node ?? null;
+  // ⚠️ Off the ERROR, not off the absence of data: a query that has not answered is not a query that
+  // answered "no" (`packages/ui/CLAUDE.md`). While the request is in flight there is no refusal to
+  // report, and the loading line below stays.
+  const refusal = refusalOf(document.error);
   // A folder shows its contents as a graph, and so does the root of the tree (#19). A document has
   // nothing to draw — which is why the switch is not offered on one rather than offered and empty.
   const graphable = selectedId === null || selected?.kind === "folder";
@@ -80,6 +85,21 @@ export function Nodes() {
           </div>
         ) : document.isPending ? (
           <p className="p-6 text-sm text-muted-foreground">{i18n.t("common.loading")}</p>
+        ) : refusal ? (
+          /* ⚠️ A refusal is not a failure, and the difference is the whole of #430. Somebody whose
+             share was revoked was left in front of "Loading…" — the worst answer of all, because it
+             says the program is still working. They get a sentence and no retry button: the answer
+             was final, and a button that changes nothing is an invitation to keep waiting.
+
+             ⚠️ One sentence for `404`, whichever of its two reasons applies. Intel answers the same
+             status for "no such node" and "not for you" on purpose — `requireVisible` in
+             `packages/api/src/nodes/nodes.ts` — and a screen that told them apart would undo that
+             from the other side. */
+          <div role="status" className="grid flex-1 place-items-center p-8 text-center text-sm">
+            <p className="max-w-sm text-muted-foreground">
+              {i18n.t(refusal === "no-permission" ? "common.noPermission" : "common.noAccess")}
+            </p>
+          </div>
         ) : document.isError || !selected ? (
           <div role="alert" className="grid flex-1 place-items-center p-8 text-center text-sm">
             <div className="space-y-3">