@basictech/react 0.12.0-beta.0 → 0.12.0-beta.2

package/CHANGELOG.md

@@ -0,0 +1,603 @@
+# @basictech/react
+
+## 0.12.0-beta.2
+
+### Minor Changes
+
+- 85388da: Add Base UI-backed account, auth, sync-status, avatar, and sharing components with optional scoped
+  styles and an appearance provider. Include a React DOM peer dependency for the portaled UI.
+  Add app-token project-profile read/update/reset APIs, React hook and settings editor, per-account
+  menu badges, and an optional avatar sync indicator.
+  Expose the components and project-profile hook through the Next.js client entry.
+  Share the saved-account registry between REST and sync modes, support add-account sign-in,
+  and keep cached display identity up to date after profile saves. Include read-only account
+  diagnostics with clipboard export and suppress sync badges in REST mode.
+
+### Patch Changes
+
+- Updated dependencies [85388da]
+  - @basictech/core@0.12.0-beta.2
+
+## 0.12.0-beta.1
+
+### Minor Changes
+
+- 7476794: Breaking 0.12 migration: remove compatibility aliases and clarify auth and write contracts.
+
+  Upgrade all public Basic packages used by an application together. See the
+  [0.12 migration guide](https://github.com/basicdb/basic-server/blob/dev/docs/MIGRATING_TO_0.12.md)
+  for replacements and migration examples. No persisted-profile migration, storage reset, or
+  wire-protocol change is required.
+
+  - `AuthStatus` drops `reauth_required`; `AuthSession` and client snapshots both report `expired`.
+  - Snapshot aliases `profiles`, `users`, `activeProfile`, `activeUser` are replaced by `accounts` and
+    `activeAccount`; `useAccounts()` returns `activeAccount`. `switchUser`/`addUser`/`removeUser`,
+    `ProfileRegistry.createAnon`, `BasicConflict.repo`, `BasicRejection.repo`, `useMounts().mounts`
+    and `useOutgoingShares().outgoingShares` are removed.
+  - `snapshot.authErrorCode` becomes `snapshot.authError: BasicError | null`; raw active diagnostics
+    remain there. Errors are cached by code and expired state. `AccountAuth.reason` is the normalized
+    `'AUTH_EXPIRED' | null`, and `readOnlyReason` is the closed `ReadOnlyReason` union.
+  - Client enqueue captures and rechecks write access around preflight; Replica separately guards its
+    serialized durable mutation. REST collections, shares, and files recheck after awaited preflight,
+    and transport checks again before sending. Blob uploads retain their boundary guard.
+  - `SyncSession`/`MountSession` use `shouldConnect` for sockets/receiving and push-only `canWrite`
+    for flush. `beginWrite` remains the local replica mutation guard; flush allocates no exceptions.
+  - Storage key names are centralized inside core but remain internal (not exported).
+    Core passes the token key to `createMessageChannel`; `createBrowserAuthChannelFactory(store)` no
+    longer parses channel names, and cross-tab auth is installed for custom token stores too.
+  - `Collection.watch(query, listener, onError?)` works in REST mode; `useQuery` is built on it.
+  - Mounted file listings accept `FileListQuery` and reject non-live `state`.
+  - `signOut()` disposes the profile through the same path as `removeAccount()`, so the cached repo
+    catalog no longer survives logout.
+  - `useStorageInfo`, `useMounts` and `useOutgoingShares` report `AUTHORIZATION_REQUIRED` or
+    `AUTH_EXPIRED` as `error` while no account is signed in. Bound hooks throw outside their own
+    Provider. `useBasic()` is memoised.
+  - `supportsAccessTokenAdoption` is no longer exported from React, restoring Next.js client export
+    parity. Direct `RestDb` construction now takes `queryStore` in place of `onMutation`, with
+    `beginWrite` still the final optional argument.
+  - The demo's local PDS rewrite is development-only, requires an exact URL-origin match, and is
+    ignored in production.
+
+### Patch Changes
+
+- Updated dependencies [f229bc4]
+- Updated dependencies [3a8962b]
+- Updated dependencies [7476794]
+  - @basictech/core@0.12.0-beta.1
+
+## 0.11.0
+
+### Minor Changes
+
+- a3e32f6: Recover OAuth and Sync sessions after browser suspension without reloading. Transient refresh failures now retry, cross-tab refresh rotation self-heals when access-token broadcasts are missed, and visible, focused, or newly online browser clients reconcile fresh credentials with owner and mounted Sync sessions.
+- 46ceb4c: Overhaul auth system: extract AuthManager, add PKCE, cross-tab sync, proactive token refresh, enriched error handling, and fix DELETE Content-Type issue
+- 46ceb4c: added debug bar
+- 46ceb4c: Rebuild the SDK on the repo-era core (0.10): negotiated REST v1, OAuth PKCE with identity
+  discovery, repo CRUD and lifecycle, atomic NDJSON snapshots, durable partitioned state, and
+  Sync/3 multi-repo sessions. Keeps the 0.9 local-first features — multiple users (anonymous and
+  signed-in), offline replicas, sync + REST modes, and reactive query hooks. Sync/2 is removed
+  from the public surface.
+- 812f9ad: Complete the 0.11 SDK rewrite with the framework-neutral Files v2, Shares v2, mount, auth,
+  typed data, persistence, and sync APIs; the schema-bound React layer; the dependency-light schema
+  definition entry point; and lockstep Next.js compile compatibility.
+- 46ceb4c: update schema
+
+### Patch Changes
+
+- 731303b: Require Node.js 24 LTS or newer for the public packages.
+- ac72e74: Expose per-account auth summaries and public expired status, canWrite, and readOnlyReason.
+  Keep expired accounts and cached data visible while rejecting new mutations with AUTH_EXPIRED
+  and pausing sync sends. Preserve pending work for same-account reauthorization, prevent delayed
+  writes from crossing account/auth generations, and retain ordinary offline and anonymous editing.
+  Consumers of reauth_required in client snapshots or React hooks should migrate to expired.
+  Generic invalid_grant does not trigger destructive revocation cleanup.
+- 46ceb4c: Fix PWA/mobile logout issues: harden auth for offline resilience, prevent spurious logouts on transient server errors, proactive token refresh on app resume, and fix potential deadlock in token refresh flow
+- 30c39d1: Remember successful handle-based share recipients in a profile-local contact cache and expose DID-to-handle lookup through the core and React shares APIs.
+- Updated dependencies [a3e32f6]
+- Updated dependencies [731303b]
+- Updated dependencies [ac72e74]
+- Updated dependencies [30c39d1]
+- Updated dependencies [30c39d1]
+- Updated dependencies [cf87ad3]
+- Updated dependencies [46ceb4c]
+- Updated dependencies [30c39d1]
+- Updated dependencies [6e1a072]
+- Updated dependencies [812f9ad]
+  - @basictech/core@0.11.0
+
+## 0.11.0-beta.3
+
+### Patch Changes
+
+- ac72e74: Expose per-account auth summaries and public expired status, canWrite, and readOnlyReason.
+  Keep expired accounts and cached data visible while rejecting new mutations with AUTH_EXPIRED
+  and pausing sync sends. Preserve pending work for same-account reauthorization, prevent delayed
+  writes from crossing account/auth generations, and retain ordinary offline and anonymous editing.
+  Consumers of reauth_required in client snapshots or React hooks should migrate to expired.
+  Generic invalid_grant does not trigger destructive revocation cleanup.
+- Updated dependencies [ac72e74]
+  - @basictech/core@0.11.0-beta.3
+
+## 0.11.0-beta.2
+
+### Minor Changes
+
+- a3e32f6: Recover OAuth and Sync sessions after browser suspension without reloading. Transient refresh failures now retry, cross-tab refresh rotation self-heals when access-token broadcasts are missed, and visible, focused, or newly online browser clients reconcile fresh credentials with owner and mounted Sync sessions.
+
+### Patch Changes
+
+- 30c39d1: Remember successful handle-based share recipients in a profile-local contact cache and expose DID-to-handle lookup through the core and React shares APIs.
+- Updated dependencies [a3e32f6]
+- Updated dependencies [30c39d1]
+- Updated dependencies [30c39d1]
+- Updated dependencies [30c39d1]
+- Updated dependencies [6e1a072]
+  - @basictech/core@0.11.0-beta.2
+
+## 0.11.0-beta.1
+
+### Minor Changes
+
+- 46ceb4c: Overhaul auth system: extract AuthManager, add PKCE, cross-tab sync, proactive token refresh, enriched error handling, and fix DELETE Content-Type issue
+- 46ceb4c: added debug bar
+- 46ceb4c: Rebuild the SDK on the repo-era core (0.10): negotiated REST v1, OAuth PKCE with identity
+  discovery, repo CRUD and lifecycle, atomic NDJSON snapshots, durable partitioned state, and
+  Sync/3 multi-repo sessions. Keeps the 0.9 local-first features — multiple users (anonymous and
+  signed-in), offline replicas, sync + REST modes, and reactive query hooks. Sync/2 is removed
+  from the public surface.
+- 812f9ad: Complete the 0.11 SDK rewrite with the framework-neutral Files v2, Shares v2, mount, auth,
+  typed data, persistence, and sync APIs; the schema-bound React layer; the dependency-light schema
+  definition entry point; and lockstep Next.js compile compatibility.
+- 46ceb4c: update schema
+
+### Patch Changes
+
+- 731303b: Require Node.js 24 LTS or newer for the public packages.
+- 46ceb4c: Fix PWA/mobile logout issues: harden auth for offline resilience, prevent spurious logouts on transient server errors, proactive token refresh on app resume, and fix potential deadlock in token refresh flow
+- Updated dependencies [731303b]
+- Updated dependencies [cf87ad3]
+- Updated dependencies [46ceb4c]
+- Updated dependencies [812f9ad]
+  - @basictech/core@0.11.0-beta.1
+
+## 0.9.0-beta.1
+
+### Minor Changes
+
+Local-first startup, anonymous mode, and multiple users.
+
+- **Anonymous mode (default on):** the local database works without a
+  session — writes queue as ordinary ops in a local-only workspace (sync
+  status `local`) and merge into the account automatically on sign-in via
+  the normal bootstrap+flush path (deferred identity — no copy step). Set
+  `anonymous={false}` on the provider for classic sign-in-required behavior.
+- **Offline cold start fixed:** the engine opens the local keyspace with no
+  token and no network (`openLocal()`), so reloading offline serves all data
+  from the replica; the connection acquires tokens with retry on its own.
+  `reauth_required` now _pauses_ the connection instead of stopping the
+  engine — local reads/writes keep working while the user re-authenticates.
+- **Multiple users:** several local users (anonymous or signed-in) side by
+  side with per-tab switching. New `useUsers()` hook
+  (`users`, `activeUser`, `switchUser`, `addUser`, `removeUser`), profile
+  registry in localStorage, per-user auth storage namespacing and isolated
+  sync keyspaces (`basic-sync:{project}:{userId}`). Existing single-user
+  sessions are adopted as the first profile automatically.
+- **Owner guard:** keyspaces are stamped with the account DID at bootstrap;
+  local data from one account can never merge into another (a mismatched
+  keyspace is wiped before bootstrap). Also fixes a latent leak where
+  unpushed ops could survive an account change.
+- **User-aware `useQuery`:** the active user id is appended to query deps
+  automatically so live queries re-attach on user switches; in-flight
+  queries hitting a closing store during the switch return undefined and
+  re-run.
+- `signOut()` now wipes the active user's data and falls through to the next
+  local user (or a fresh anonymous workspace); `useAuth()` exposes
+  `isAnonymous`; sync status gains `local`.
+
+## 0.9.0-beta.0
+
+### Major Changes (breaking)
+
+Ground-up rewrite for the server's Sync/2 sync engine and Step 2 auth upgrade.
+The legacy dexie-syncable `/ws` protocol was removed server-side (clean
+break), so 0.8.x sync no longer works against production.
+
+- **New sync engine** (`core/sync/`): implements the Sync/2 client contract
+  (SYNC_V2.md) — snapshot bootstrap, multiplexed WebSocket subscriptions,
+  client-minted idempotent ops (`put`/`patch`/`delete`), persisted pending
+  queue with optimistic rebase, ordered apply with echo confirmation,
+  poison-op handling for terminal rejections, and re-bootstrap recovery
+  (`SNAPSHOT_REQUIRED`/`RESET_REQUIRED`). Local persistence is plain Dexie
+  (dexie-syncable/dexie-observable removed).
+- **New public API**: `db.table(name)` with `create/put/patch/delete/get/
+getAll/find`; `useAuth`, `useDb`, `useSyncStatus`, `useShares`, `useShare`;
+  `useBasic` remains the umbrella hook. `useQuery` still provides live reads.
+- **Shares v1**: list shares and mount shared data via `useShare(shareId)` —
+  separate local keyspace per mount, guest writes when permitted, revocation
+  handling.
+- **Auth updates**: `signOut()` revokes server-side via `POST /auth/logout`;
+  sign-out (incl. cross-tab) tears down local data without page reloads;
+  token-endpoint 429s are treated as transient; `CONNECTION_REVOKED` from
+  sync triggers session reconciliation.
+- **REST mode**: `mode="rest"` replaces `dbMode="remote"`, backed by the
+  REST v2 surface (`/account/:project_id/db/...`), including
+  snapshot/changes endpoints.
+- Tests: vitest unit suite + integration suite against the Sync/2 reference
+  server (`basic-server/sync-playground`).
+
+## 0.8.0-beta.4
+
+### Patch Changes
+
+- Auth status state machine and session reconciliation: add `AuthStatus` type (`bootstrapping`, `authenticated`, `recovering`, `reauth_required`, `signed_out`), replace `window.location.reload()` cross-tab handlers with in-place state updates, add `reconcileSession` for sync/visibility/online recovery, handle `tokenUpdateAck` in sync protocol, and expose `authStatus` + `authErrorCode` from `useBasic()`
+
+## 0.8.0-beta.3
+
+### Patch Changes
+
+- Fix PWA/mobile logout issues: harden auth for offline resilience, prevent spurious logouts on transient server errors, proactive token refresh on app resume, and fix potential deadlock in token refresh flow
+
+## 0.8.0-beta.2
+
+### Minor Changes
+
+- added debug bar
+
+## 0.8.0-beta.1
+
+### Minor Changes
+
+- uth updates
+
+## 0.8.0-beta.0
+
+### Minor Changes
+
+- Overhaul auth system: extract AuthManager, add PKCE, cross-tab sync, proactive token refresh, enriched error handling, and fix DELETE Content-Type issue
+
+## Unreleased
+
+### Patch Changes
+
+- **DBStatus:** Add `ERROR_WILL_RETRY` to align with dexie-syncable status code 4 (error but will retry). Export `DBStatus` enum from the package. Document all `DBStatus` values in readme, including when `ERROR_WILL_RETRY` occurs (e.g. expired token). Enables UI to show "Reconnecting…" or future token refresh on this state.
+
+## 0.7.0
+
+### Minor Changes
+
+- 6a506e9: api improvements, react refactor, nextjs update
+- e45744e: localstorage update
+- e45744e: storage adapater update
+- update apis, add remote db + sync db
+
+### Patch Changes
+
+- cdf7123: refresh token patch
+- 7e68aa3: add oauth settings
+- 841839f: fix: provider props
+- 7e68aa3: update token endpoint
+- 4f11b3e: config server url & token patch
+
+## 0.7.0-beta.7
+
+### Minor Changes
+
+- api improvements, react refactor, nextjs update
+
+## 0.7.0-beta.6
+
+### Patch Changes
+
+- refresh token patch
+
+## 0.7.0-beta.5
+
+### Patch Changes
+
+- config server url & token patch
+
+## 0.7.0-beta.4
+
+### Patch Changes
+
+- fix: provider props
+
+## 0.7.0-beta.3
+
+### Patch Changes
+
+- add oauth settings
+
+## 0.7.0-beta.2
+
+### Patch Changes
+
+- update token endpoint
+
+## 0.7.0-beta.1
+
+### Minor Changes
+
+- storage adapater update
+
+## 0.7.0-beta.0
+
+### Minor Changes
+
+- localstorage update
+
+## 0.6.0
+
+### Minor Changes
+
+- d241ffa: suerver url patch
+
+### Patch Changes
+
+- Updated dependencies
+  - @basictech/schema@0.6.0
+
+## 0.6.0-beta.0
+
+### Minor Changes
+
+- suerver url patch
+
+## 0.5.0
+
+### Minor Changes
+
+- 6765047: fix server url
+- af26a15: include schema to sync
+- 783ecad: reset db on signout
+- 6dd6ad9: add react 19
+- f9c25a3: fix update notif
+- 7f42c2a: react - initdb and version check
+- weee
+
+## 0.5.0-beta.5
+
+### Minor Changes
+
+- fix update notif
+
+## 0.5.0-beta.4
+
+### Minor Changes
+
+- react - initdb and version check
+
+## 0.5.0-beta.3
+
+### Minor Changes
+
+- add react 19
+
+## 0.5.0-beta.2
+
+### Minor Changes
+
+- fix server url
+
+## 0.5.0-beta.1
+
+### Minor Changes
+
+- include schema to sync
+
+## 0.5.0-beta.0
+
+### Minor Changes
+
+- reset db on signout
+
+## 0.4.0
+
+### Minor Changes
+
+- a41eb20: schema validation to react client
+- b572027: patch - occasional sync disconnect
+
+### Patch Changes
+
+- Updated dependencies
+- Updated dependencies [a41eb20]
+- Updated dependencies [c76951e]
+  - @basictech/schema@0.5.0
+
+## 0.4.0-beta.1
+
+### Patch Changes
+
+- Updated dependencies
+  - @basictech/schema@0.5.0-beta.1
+
+## 0.4.0-beta.0
+
+### Minor Changes
+
+- a41eb20: schema validation to react client
+- patch - occasional sync disconnect
+
+### Patch Changes
+
+- Updated dependencies [a41eb20]
+  - @basictech/schema@0.5.0-beta.0
+
+## 0.3.0
+
+### Minor Changes
+
+- schema validation in react client
+
+### Patch Changes
+
+- Updated dependencies
+  - @basictech/schema@0.4.0
+
+## 0.2.2
+
+### Patch Changes
+
+- Updated dependencies [f9ad8d1]
+  - @basictech/schema@0.3.0
+
+## 0.2.1
+
+### Patch Changes
+
+- Updated dependencies
+  - @basictech/schema@0.2.0
+
+## 0.2.0
+
+### Minor Changes
+
+- 5890f4c: changed isLoaded to isAuthReady and fixed dbStatus hooks for useBasic
+- ba294c5: dependency updates
+- cd827af: add schema validation
+- 1a3fe80: schema validation bugfix
+- 13594a9: added basic-sync
+- ba294c5: dependency update
+- f035281: remove sync lib
+- 4841960: rebuild tsup
+- 96e0156: update schema validation
+- cda3d16: add schema validation
+- 2c898ae: update useQuery hook
+
+  - no need to pass param as a function, can now enter query directly
+  - defaults to empty array when loading
+
+- 90ccdd7: add debug option
+- 4841960: test build
+- f035281: remove sync library
+- ef528e9: added schema package - test
+
+### Patch Changes
+
+- 3c7b34e: version changes mostly
+- c085672: reset versions
+- Updated dependencies [96e0156]
+- Updated dependencies [ef528e9]
+  - @basictech/schema@0.1.0
+
+## 0.2.0-beta.11
+
+### Minor Changes
+
+- update schema validation
+
+### Patch Changes
+
+- Updated dependencies
+  - @basictech/schema@0.1.0-beta.1
+
+## 0.2.0-beta.10
+
+### Minor Changes
+
+- added schema package - test
+
+### Patch Changes
+
+- Updated dependencies
+  - @basictech/schema@0.1.0-beta.0
+
+## 0.2.0-beta.9
+
+### Minor Changes
+
+- add schema validation
+
+## 0.2.0-beta.8
+
+### Minor Changes
+
+- changed isLoaded to isAuthReady and fixed dbStatus hooks for useBasic
+
+## 0.2.0-beta.7
+
+### Minor Changes
+
+- update useQuery hook
+  - no need to pass param as a function, can now enter query directly
+  - defaults to empty array when loading
+
+## 0.2.0-beta.6
+
+### Minor Changes
+
+- add debug option
+
+## 0.2.0-beta.5
+
+### Minor Changes
+
+- schema validation bugfix
+
+## 0.2.0-beta.4
+
+### Minor Changes
+
+- add schema validation
+
+## 0.2.0-beta.3
+
+### Minor Changes
+
+- remove sync lib
+- 4841960: test build
+- remove sync library
+
+## 0.2.0-beta.2
+
+### Minor Changes
+
+- rebuild tsup
+
+## 0.2.0-beta.1
+
+### Minor Changes
+
+- dependency updates
+- 13594a9: added basic-sync
+- dependency update
+
+### Patch Changes
+
+- 3c7b34e: version changes mostly
+- Updated dependencies [3c7b34e]
+- Updated dependencies
+  - @repo/sync@0.1.0-beta.0
+
+## 0.1.1-beta.0
+
+### Patch Changes
+
+- c085672: reset versions
+
+## 1.1.0
+
+### Minor Changes
+
+- testing
+
+## 1.1.0
+
+### Minor Changes
+
+- 9da7748: hello :)
+- fixes auth token on refresh
+
+# 1.3.3
+
+- fixed db.get()
+- fixed auth endpoint
+
+# 1.3.2
+
+# added database apis (expirimental)
+
+# 1.3.1
+
+- addded auth