@authorbot/domain 0.1.31 → 0.1.33

package/CHANGELOG.md

@@ -9,6 +9,54 @@ Every published package shares this version. A tag builds, tests, and publishes
 all of them together, so `@authorbot/cli@0.1.15` and `@authorbot/api@0.1.15` are
 always the same commit.
 
+## 0.1.33
+
+- **Collaboration state now stays coherent across the whole site.** Account,
+  chapter, annotation, reply, vote, Work, operation, and lease state share one
+  lazily loaded browser store. Writes update the page immediately, reconcile
+  against authoritative responses and events, and roll back honestly when a
+  request fails.
+- **New Work claims can recover without persisting lease secrets.** A client
+  that loses an in-memory lease token can rotate it through a new
+  credential-bound recovery endpoint. Only the exact browser session or agent
+  token that made the claim can recover it, and recovery cannot renew or revive
+  an expired lease. Claims already live when a book upgrades have no credential
+  binding; release and claim them again before relying on recovery.
+- **Live collaboration uses fewer requests and exposes less state.** Concurrent
+  reads are coalesced, event streams restart when authorization changes, and
+  anonymous or signed-in nonmember event polling receives only explicitly
+  reviewed public event types and payload fields.
+- Background synchronization no longer tears down a sign-in form or editor
+  while someone is using it. Optimistic voting, replies, notes, drafts, and
+  Work actions retain focus and settle against the same shared state.
+- The collaborator skill documents lost-token recovery and safe retry behavior.
+  No book-format migration or D1 database migration is required for this
+  release.
+
+## 0.1.32
+
+- **Chapter navigation shows the work around each chapter.** Signed-in
+  collaborators now see separate, accessible counts for open suggestions,
+  block or range comments, whole-chapter comments, replies, and active Work on
+  the chapter list, current chapter, previous and next links, and Draft rows.
+  The counts come from one indexed database read instead of one request per
+  chapter.
+- **Any open note can become Work with one click.** Maintainers can promote
+  suggestions and comments at chapter, block, or range scope without entering
+  a reason. Accepted cards settle into a compact green state, and Previous and
+  Next controls move through a chapter's notes without manual scrolling.
+- **Upgrades repair their own lockfile.** `authorbot upgrade` now aligns the CLI
+  and API packages, refreshes `package-lock.json` with scripts disabled, checks
+  the resolved versions, and fails before changing the repository if npm cannot
+  produce a safe lockfile.
+- The collaboration UI now has its first project-scoped `zustand/vanilla`
+  store for shared session and chapter-summary reads. Optimistic mutation and
+  event reconciliation remain explicitly staged as the next Phase 11
+  increment.
+- This release includes database migration `0009_chapter_activity.sql`, which
+  adds indexes for the chapter activity aggregate. No book-format migration is
+  required.
+
 ## 0.1.31
 
 - **Suggestion cards take you back to the prose they reference.** Clicking a

package/dist/index.d.ts

@@ -17,7 +17,7 @@ export type { DecisionResult, SupportChangeOutcome, SupportChangeTransition, } f
 export { PHASE3_WORK_ITEM_STATUSES, WORK_ITEM_STATUSES, WORK_ITEM_TRANSITIONS, canTransitionWorkItem, isPhase3WorkItemStatus, transitionWorkItem, } from "./work-item-state.js";
 export type { WorkItemStatus, WorkItemTransitionDenialReason, } from "./work-item-state.js";
 export { FORCE_CREATE_RULE_VERSION, MAX_OVERRIDE_REASON_LENGTH, MIN_OVERRIDE_REASON_LENGTH, authorizeCancelWorkItem, authorizeForceCreateWorkItem, authorizeRejectSuggestion, authorizeReopenSuggestion, cancelWorkItemCommandSchema, forceCreateWorkItemCommandSchema, overrideReasonSchema, rejectSuggestionCommandSchema, reopenSuggestionCommandSchema, } from "./overrides.js";
-export type { CancelWorkItemCommand, ForceCreateWorkItemCommand, RejectSuggestionCommand, ReopenSuggestionCommand, SuggestionOverrideDenialReason, WorkItemOverrideDenialReason, } from "./overrides.js";
+export type { AnnotationPromotionDenialReason, CancelWorkItemCommand, ForceCreateWorkItemCommand, RejectSuggestionCommand, ReopenSuggestionCommand, SuggestionOverrideDenialReason, WorkItemOverrideDenialReason, } from "./overrides.js";
 export { AGENT_TOKEN_PREFIX, AGENT_TOKEN_REGEX, AGENT_TOKEN_SECRET_LENGTH, DEFAULT_TOKEN_TTL_DAYS, LAST_USED_UPDATE_INTERVAL_MS, MAX_TOKEN_TTL_DAYS, SESSION_ID_LENGTH, SESSION_ID_REGEX, SESSION_TTL_DAYS, agentTokenSchema, checkTokenActive, isAgentTokenFormat, isSessionIdFormat, parseAgentToken, resolveSessionExpiry, resolveTokenExpiry, sessionIdSchema, shouldUpdateLastUsed, toTimestamp, } from "./token.js";
 export type { AgentTokenParseFailure, AgentTokenParseResult, TokenExpiryResult, TokenInactiveReason, } from "./token.js";
 export { DEFAULT_LEASE_CONFIG, LEASE_DURATION_MS, LEASE_MAX_TOTAL_DURATION_MS, LEASE_RENEWAL_DURATION_MS, LEASE_RENEWAL_PROMPT_BEFORE_MS, checkLeaseActive, checkLeaseRenewable, checkWorkItemClaimable, isLeaseExpired, leaseConfigSchema, parseIsoDuration, renewalPromptAt, resolveLeaseExpiry, shouldExpireLease, } from "./lease.js";

package/dist/overrides.d.ts

@@ -4,9 +4,10 @@ import { type Decision } from "./decision.js";
 import type { Role } from "./scopes.js";
 /**
  * Maintainer overrides (Phase 3 contract section 4; design section 11.2).
- * All four are maintainer-only, require a recorded `reason`, and are recorded
- * as decisions with `override_reason`. Force-create bypasses the rule but
- * respects the same uniqueness key `(source_annotation_id, action_type,
+ * Reject, reopen, and cancel require a recorded `reason`. Phase 11 makes
+ * promotion a one-click action for either annotation kind, so force-create
+ * accepts a legacy reason but does not require one. It still bypasses the rule
+ * and respects the same uniqueness key `(source_annotation_id, action_type,
  * rule_version)` with `rule_version: 0`.
  */
 /** Minimum meaningful override reason length (after trimming). */
@@ -41,10 +42,11 @@ export type ReopenSuggestionCommand = z.infer<typeof reopenSuggestionCommandSche
  */
 export declare const forceCreateWorkItemCommandSchema: z.ZodObject<{
     annotationId: z.ZodString;
-    reason: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    reason: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
 }, z.core.$strict>;
 export type ForceCreateWorkItemCommand = z.infer<typeof forceCreateWorkItemCommandSchema>;
 export type SuggestionOverrideDenialReason = "not-maintainer" | "not-a-suggestion" | "illegal-transition";
+export type AnnotationPromotionDenialReason = "not-maintainer" | "illegal-transition";
 /** Reject an open suggestion (`open -> rejected`). */
 export declare function authorizeRejectSuggestion(input: {
     actorRole: Role;
@@ -64,7 +66,7 @@ export declare function authorizeCancelWorkItem(input: {
     workItemStatus: WorkItemStatus;
 }): Decision<WorkItemOverrideDenialReason>;
 /**
- * Force-create a work item for an open suggestion, bypassing the rule. The
+ * Promote any open annotation to a work item, bypassing the rule. The
  * annotation must still be able to make the `open -> work_item_created`
  * transition; uniqueness (one item per annotation/action/rule-version) is the
  * DB constraint's job.
@@ -73,5 +75,5 @@ export declare function authorizeForceCreateWorkItem(input: {
     actorRole: Role;
     annotationKind: AnnotationKind;
     annotationStatus: AnnotationStatus;
-}): Decision<SuggestionOverrideDenialReason>;
+}): Decision<AnnotationPromotionDenialReason>;
 //# sourceMappingURL=overrides.d.ts.map

package/dist/overrides.js

@@ -5,9 +5,10 @@ import { ALLOWED, denied } from "./decision.js";
 import { transitionWorkItem } from "./work-item-state.js";
 /**
  * Maintainer overrides (Phase 3 contract section 4; design section 11.2).
- * All four are maintainer-only, require a recorded `reason`, and are recorded
- * as decisions with `override_reason`. Force-create bypasses the rule but
- * respects the same uniqueness key `(source_annotation_id, action_type,
+ * Reject, reopen, and cancel require a recorded `reason`. Phase 11 makes
+ * promotion a one-click action for either annotation kind, so force-create
+ * accepts a legacy reason but does not require one. It still bypasses the rule
+ * and respects the same uniqueness key `(source_annotation_id, action_type,
  * rule_version)` with `rule_version: 0`.
  */
 /** Minimum meaningful override reason length (after trimming). */
@@ -43,7 +44,7 @@ export const reopenSuggestionCommandSchema = z.strictObject({
  */
 export const forceCreateWorkItemCommandSchema = z.strictObject({
     annotationId: uuidv7Schema,
-    reason: overrideReasonSchema,
+    reason: overrideReasonSchema.optional(),
 });
 function requireMaintainer(actorRole) {
     if (actorRole !== "maintainer") {
@@ -91,7 +92,7 @@ export function authorizeCancelWorkItem(input) {
     return transitionWorkItem(input.workItemStatus, "cancelled");
 }
 /**
- * Force-create a work item for an open suggestion, bypassing the rule. The
+ * Promote any open annotation to a work item, bypassing the rule. The
  * annotation must still be able to make the `open -> work_item_created`
  * transition; uniqueness (one item per annotation/action/rule-version) is the
  * DB constraint's job.
@@ -100,11 +101,8 @@ export function authorizeForceCreateWorkItem(input) {
     const maintainer = requireMaintainer(input.actorRole);
     if (!maintainer.allowed)
         return maintainer;
-    const suggestion = requireSuggestion(input.annotationKind);
-    if (!suggestion.allowed)
-        return suggestion;
     if (!canTransitionAnnotation(input.annotationStatus, "work_item_created")) {
-        return denied("illegal-transition", `a suggestion with status "${input.annotationStatus}" cannot receive a work item (only "open")`);
+        return denied("illegal-transition", `an annotation with status "${input.annotationStatus}" cannot receive a work item (only "open")`);
     }
     return ALLOWED;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authorbot/domain",
-  "version": "0.1.31",
+  "version": "0.1.33",
   "description": "Pure domain logic for Authorbot: role/scope authorization, annotation and Git-operation state machines, command validators, and token/session value rules (Phase 2 contract section 3)",
   "keywords": [
     "authorbot",
@@ -40,7 +40,7 @@
   ],
   "dependencies": {
     "zod": "^4.0.0",
-    "@authorbot/schemas": "0.1.31"
+    "@authorbot/schemas": "0.1.33"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",