@cat-factory/kernel 0.219.0 → 0.220.0

package/dist/ports/capability-credential-repositories.d.ts

@@ -11,12 +11,39 @@ export interface CapabilityCredentialRecord {
      * updatedAt }`), so the settings view can list what is configured without decrypting anything.
      */
     summary: string;
+    /**
+     * Optimistic-concurrency revision, bumped on every write. The row is ONE sealed blob, so the
+     * per-key writes are read-modify-write over the whole set; the rev is what keeps two operators
+     * saving DIFFERENT keys from silently destroying each other's (the loser's save returned
+     * success, so nothing would ever look wrong).
+     */
+    rev: number;
     createdAt: number;
     updatedAt: number;
 }
 export interface CapabilityCredentialRepository {
     get(workspaceId: string): Promise<CapabilityCredentialRecord | null>;
+    /**
+     * Blind whole-set write (the set-replacing PUT, whose semantics ARE last-writer-wins). Inserts
+     * with the record's `rev`; on conflict the STORED rev is bumped in SQL (the record's is
+     * ignored), so the rev stays monotonic under blind writes and a concurrent `compareAndSwap`
+     * whose base predates this write reliably loses.
+     */
     upsert(record: CapabilityCredentialRecord): Promise<void>;
+    /**
+     * Rev-guarded conditional write for the read-modify-write paths (the per-key put/remove):
+     * persists `record` (with `record.rev` already bumped by the caller) ONLY if the stored row
+     * still carries `expectedRev`. `expectedRev: null` means "expect NO row": a
+     * conflict-do-nothing insert, false when a concurrent writer created one. False ⇒ the caller
+     * reloads and re-applies on the winner's snapshot.
+     */
+    compareAndSwap(record: CapabilityCredentialRecord, expectedRev: number | null): Promise<boolean>;
+    /**
+     * Rev-guarded delete (a per-key remove that empties the set). False when another writer moved
+     * the row first: their write may have added the key back.
+     */
+    deleteIfRev(workspaceId: string, expectedRev: number): Promise<boolean>;
+    /** Blind delete: the whole-set PUT of an empty set, which clears the row by intent. */
     delete(workspaceId: string): Promise<void>;
 }
 //# sourceMappingURL=capability-credential-repositories.d.ts.map

package/dist/ports/capability-credential-repositories.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability-credential-repositories.d.ts","sourceRoot":"","sources":["../../src/ports/capability-credential-repositories.ts"],"names":[],"mappings":"AAcA,qFAAqF;AACrF,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAA;IACpE,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzD,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3C"}
+{"version":3,"file":"capability-credential-repositories.d.ts","sourceRoot":"","sources":["../../src/ports/capability-credential-repositories.ts"],"names":[],"mappings":"AAcA,qFAAqF;AACrF,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAA;IACf;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAA;IACpE;;;;;OAKG;IACH,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzD;;;;;;OAMG;IACH,cAAc,CAAC,MAAM,EAAE,0BAA0B,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChG;;;OAGG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACvE,uFAAuF;IACvF,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/kernel",
-  "version": "0.219.0",
+  "version": "0.220.0",
   "description": "Shared vocabulary, pure logic, and port interfaces for the Agent Architecture Board.",
   "repository": {
     "type": "git",
@@ -26,7 +26,7 @@
   "dependencies": {
     "ai": "^7.0.47",
     "yaml": "^2.9.0",
-    "@cat-factory/contracts": "0.216.0"
+    "@cat-factory/contracts": "0.217.0"
   },
   "devDependencies": {
     "@vitest/coverage-v8": "^4.1.10",