@codemem/server 0.33.0-alpha.2 → 0.33.0-alpha.3

package/dist/routes/sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../src/routes/sync.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAKX,WAAW,EAIX,MAAM,eAAe,CAAC;AAuFvB,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAE3E,KAAK,YAAY,GAAG,MAAM,WAAW,CAAC;AACtC,KAAK,iBAAiB,GAAG;IACxB,KAAK,EACF,UAAU,GACV,SAAS,GACT,UAAU,GACV,OAAO,GACP,UAAU,GACV,iBAAiB,GACjB,iBAAiB,GACjB,IAAI,CAAC;IACR,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAoBF,UAAU,wBAAwB;IACjC,cAAc,CAAC,EAAE;QAChB,OAAO,EAAE,0BAA0B,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,wBAAwB,EAAE,MAAM,CAAC;QACjC,4BAA4B,EAAE,MAAM,CAAC;KACrC,CAAC;CACF;AA+2DD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,GAAE,wBAA6B,8EAiZ7F;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACzB,QAAQ,EAAE,YAAY,EACtB,oBAAoB,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,8EAwqErD"}
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../src/routes/sync.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAKX,WAAW,EAIX,MAAM,eAAe,CAAC;AAuFvB,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAE3E,KAAK,YAAY,GAAG,MAAM,WAAW,CAAC;AACtC,KAAK,iBAAiB,GAAG;IACxB,KAAK,EACF,UAAU,GACV,SAAS,GACT,UAAU,GACV,OAAO,GACP,UAAU,GACV,iBAAiB,GACjB,iBAAiB,GACjB,IAAI,CAAC;IACR,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAoBF,UAAU,wBAAwB;IACjC,cAAc,CAAC,EAAE;QAChB,OAAO,EAAE,0BAA0B,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,wBAAwB,EAAE,MAAM,CAAC;QACjC,4BAA4B,EAAE,MAAM,CAAC;KACrC,CAAC;CACF;AAi3DD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,GAAE,wBAA6B,8EAiZ7F;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACzB,QAAQ,EAAE,YAAY,EACtB,oBAAoB,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,8EA0qErD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codemem/server",
-  "version": "0.33.0-alpha.2",
+  "version": "0.33.0-alpha.3",
   "type": "module",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -19,7 +19,7 @@
     "drizzle-orm": "^0.45.2",
     "hono": "^4.12.21",
     "limiter": "^3.0.0",
-    "@codemem/core": "^0.33.0-alpha.2"
+    "@codemem/core": "^0.33.0-alpha.3"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",

package/static/app.js

@@ -14616,6 +14616,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		["needs_attention", "Needs review"],
 		["suggested", "Has suggestion"],
 		["local_only", "Stays on this device"],
+		["received", "Received from peers"],
 		["explicitly_mapped", "Already assigned"],
 		["legacy_review", "Older shared data"],
 		["unmapped", "Missing project identity"]
@@ -14645,6 +14646,18 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			default: return "stays on this device";
 		}
 	}
+	function isPeerReceivedProject(project) {
+		return project.read_only === true && project.read_only_reason === "peer_received";
+	}
+	function isLocallyAssignableProject(project) {
+		return project.identity_source !== "unmapped" && !isPeerReceivedProject(project);
+	}
+	function projectDomainLabel(project) {
+		return isPeerReceivedProject(project) ? "Received from peers" : scopeSummary(project.resolved_scope_id);
+	}
+	function projectResolutionLabel(project) {
+		return isPeerReceivedProject(project) ? "source-owned project" : formatResolution(project.resolution_reason);
+	}
 	function formatLatest(value) {
 		if (!value) return "No recent sessions";
 		const date = new Date(value);
@@ -14823,7 +14836,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		}
 	}
 	async function saveProjectClusterMapping(projects, scopeId) {
-		const assignable = projects.filter((project) => project.identity_source !== "unmapped");
+		const assignable = projects.filter(isLocallyAssignableProject);
 		if (assignable.length === 0) return;
 		try {
 			await saveSharingDomainProjectMappings({ mappings: assignable.map((project) => ({
@@ -14911,6 +14924,13 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 	function renderProjectActions(project) {
 		const actions = document.createElement("div");
 		actions.className = "project-inventory-actions";
+		if (isPeerReceivedProject(project)) {
+			const note = document.createElement("div");
+			note.className = "settings-note";
+			note.textContent = "This project was received from a peer. Change its project or Space on the source device; this node keeps the received identity read-only.";
+			actions.appendChild(note);
+			return actions;
+		}
 		if (project.identity_source === "unmapped") {
 			const note = document.createElement("div");
 			note.className = "settings-note";
@@ -15055,13 +15075,19 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		header.appendChild(title);
 		const domain = document.createElement("div");
 		domain.className = "project-inventory-domain";
-		domain.textContent = scopeSummary(project.resolved_scope_id);
+		domain.textContent = projectDomainLabel(project);
 		header.appendChild(domain);
 		row.appendChild(header);
 		const meta = document.createElement("div");
 		meta.className = "project-inventory-meta";
-		meta.textContent = `${formatResolution(project.resolution_reason)} · ${project.identity_source} · ${formatLatest(project.latest_session_at)}`;
+		meta.textContent = `${projectResolutionLabel(project)} · ${project.identity_source} · ${formatLatest(project.latest_session_at)}`;
 		row.appendChild(meta);
+		if (isPeerReceivedProject(project)) {
+			const receivedNote = document.createElement("div");
+			receivedNote.className = "settings-note";
+			receivedNote.textContent = "Received memories keep the source device's project and Space assignment. Local reassignment controls are disabled here to avoid split-brain sync state.";
+			row.appendChild(receivedNote);
+		}
 		const signal = document.createElement("div");
 		signal.className = "project-inventory-signal mono";
 		signal.textContent = strongestSignal(project);
@@ -15072,7 +15098,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			suggestion.textContent = project.suggestion_reason ? `Suggestion: ${project.suggestion_reason}` : `Suggestion: assign this project to ${scopeSummary(project.suggested_scope_id)}.`;
 			row.appendChild(suggestion);
 		}
-		const warnings = project.guardrail_warnings.filter((warning) => warning.severity === "warning");
+		const warnings = (project.guardrail_warnings ?? []).filter((warning) => warning.severity === "warning");
 		if (warnings.length > 0) {
 			const warningBox = document.createElement("div");
 			warningBox.className = "settings-note project-attention-note";
@@ -15108,7 +15134,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			["CWD", project.cwd],
 			["Git remote", project.git_remote],
 			["Git branch", project.git_branch],
-			["Current Space", scopeSummary(project.resolved_scope_id)],
+			["Current Space", projectDomainLabel(project)],
 			["Suggested Space", project.suggested_scope_id ? scopeSummary(project.suggested_scope_id) : null],
 			["Advanced: current Space ID", project.resolved_scope_id],
 			["Advanced: suggested Space ID", project.suggested_scope_id],
@@ -15129,8 +15155,8 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		return row;
 	}
 	function clusterDomainLabel(projects) {
-		const uniqueScopes = [...new Set(projects.map((project) => project.resolved_scope_id))];
-		return uniqueScopes.length === 1 ? scopeSummary(uniqueScopes[0]) : "Mixed Spaces";
+		const uniqueLabels = [...new Set(projects.map((project) => projectDomainLabel(project)))];
+		return uniqueLabels.length === 1 ? uniqueLabels[0] : "Mixed Spaces";
 	}
 	function renderProjectCluster(projects) {
 		if (projects.length === 1) return renderProjectRow(projects[0]);
@@ -15156,36 +15182,45 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		row.appendChild(meta);
 		const actions = document.createElement("div");
 		actions.className = "project-inventory-actions";
-		const hasGuardrailWarnings = projects.some((project) => project.guardrail_warnings.length > 0);
-		const suggestedScopes = new Set(projects.map((project) => project.suggested_scope_id).filter((scopeId) => Boolean(scopeId)));
-		const resolvedScopes = new Set(projects.map((project) => project.resolved_scope_id));
-		const select = document.createElement("select");
-		select.className = "project-domain-select";
-		select.setAttribute("aria-label", `Space for ${projectClusterLabel(projects[0])} group`);
-		const placeholder = document.createElement("option");
-		placeholder.value = "";
-		placeholder.textContent = "Choose Space…";
-		select.appendChild(placeholder);
-		appendAssignableScopeOptions(select);
-		select.value = "";
-		const save = document.createElement("button");
-		save.className = "settings-button";
-		save.type = "button";
-		save.textContent = `Save Space for ${projects.length} identities`;
-		save.disabled = true;
-		save.addEventListener("click", () => void saveProjectClusterMapping(projects, select.value));
-		select.addEventListener("change", () => {
-			save.disabled = !select.value || hasGuardrailWarnings;
-		});
-		select.addEventListener("blur", refreshSkippedProjectDataAfterSelectBlur);
-		actions.append(select, save);
-		if (suggestedScopes.size > 1 || resolvedScopes.size > 1 || hasGuardrailWarnings) {
+		const assignableProjects = projects.filter(isLocallyAssignableProject);
+		if (assignableProjects.length === 0) {
 			const note = document.createElement("div");
-			note.className = "settings-note project-attention-note";
-			note.textContent = hasGuardrailWarnings ? "One or more identities in this group need individual review before bulk assignment." : "This group has mixed suggestions or current Spaces. Choose a Space explicitly before bulk assignment.";
+			note.className = "settings-note";
+			note.textContent = projects.every(isPeerReceivedProject) ? "These project identities were received from peers. Change project or Space assignments on their source devices." : "These project identities cannot be bulk assigned until they have stable local identities. Expand each identity for details.";
 			actions.appendChild(note);
+			row.appendChild(actions);
+		} else {
+			const hasGuardrailWarnings = assignableProjects.some((project) => (project.guardrail_warnings ?? []).length > 0);
+			const suggestedScopes = new Set(assignableProjects.map((project) => project.suggested_scope_id).filter((scopeId) => Boolean(scopeId)));
+			const resolvedScopes = new Set(assignableProjects.map((project) => project.resolved_scope_id));
+			const select = document.createElement("select");
+			select.className = "project-domain-select";
+			select.setAttribute("aria-label", `Space for ${projectClusterLabel(projects[0])} group`);
+			const placeholder = document.createElement("option");
+			placeholder.value = "";
+			placeholder.textContent = "Choose Space…";
+			select.appendChild(placeholder);
+			appendAssignableScopeOptions(select);
+			select.value = "";
+			const save = document.createElement("button");
+			save.className = "settings-button";
+			save.type = "button";
+			save.textContent = `Save Space for ${assignableProjects.length} identit${assignableProjects.length === 1 ? "y" : "ies"}`;
+			save.disabled = true;
+			save.addEventListener("click", () => void saveProjectClusterMapping(assignableProjects, select.value));
+			select.addEventListener("change", () => {
+				save.disabled = !select.value || hasGuardrailWarnings;
+			});
+			select.addEventListener("blur", refreshSkippedProjectDataAfterSelectBlur);
+			actions.append(select, save);
+			if (suggestedScopes.size > 1 || resolvedScopes.size > 1 || hasGuardrailWarnings) {
+				const note = document.createElement("div");
+				note.className = "settings-note project-attention-note";
+				note.textContent = hasGuardrailWarnings ? "One or more identities in this group need individual review before bulk assignment." : "This group has mixed suggestions or current Spaces. Choose a Space explicitly before bulk assignment.";
+				actions.appendChild(note);
+			}
+			row.appendChild(actions);
 		}
-		row.appendChild(actions);
 		const details = document.createElement("details");
 		details.className = "project-inventory-details";
 		details.open = openProjectClusters.has(clusterKey);
@@ -18841,6 +18876,9 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 	}
 	//#endregion
 	//#region src/tabs/sync/diagnostics/render/sync-attempts.ts
+	function shouldShowSyncAttemptRedactionHint(attempt, redact) {
+		return redact && attempt.error_redacted === true;
+	}
 	function renderSyncAttempts() {
 		const syncAttempts = document.getElementById("syncAttempts");
 		if (!syncAttempts) return;
@@ -18862,7 +18900,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 			if (isError && attempt.error) {
 				const errText = String(attempt.error);
 				detailParts.push(redact ? redactIpOctets(errText) : errText);
-				if (redact && /enable diagnostics for details/i.test(errText)) detailParts.push("Turn off Redact in Advanced diagnostics to reveal the full error.");
+				if (shouldShowSyncAttemptRedactionHint(attempt, redact)) detailParts.push("Turn off Redact in Advanced diagnostics to reveal the full error.");
 			}
 			if (!isError && (attempt.ops_in || attempt.ops_out)) detailParts.push(`${attempt.ops_in ?? 0} in · ${attempt.ops_out ?? 0} out`);
 			if (!redact && attempt.address) detailParts.push(attempt.address);
@@ -19493,6 +19531,9 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 	function openTeamsAccessManagement() {
 		window.location.hash = "coordinator-admin";
 	}
+	function canManageSpacesInTeams(status = state.lastCoordinatorAdminStatus) {
+		return status?.readiness === "ready" && status.has_admin_secret === true;
+	}
 	function SyncPeerCard({ peer, onAssignActor, onRemove, onRename, onSync }) {
 		const peerId = String(peer.peer_device_id || "");
 		const displayName = peer.name || (peerId ? peerId.slice(0, 8) : "unknown");
@@ -19601,11 +19642,12 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		}
 		async function sync() {
 			if (pendingScopeReview) {
+				const canReviewInTeams = canManageSpacesInTeams();
 				if (!await openSyncConfirmDialog({
 					title: `Sync ${displayName} before advanced rule review?`,
-					description: "This manual sync will use the current Space access and advanced filters until you review them in Teams.",
+					description: canReviewInTeams ? "This manual sync will use the current Space access and advanced filters until you review them in Teams." : "This manual sync will use the current Space access and advanced filters until a coordinator or manager reviews them in Teams.",
 					confirmLabel: "Sync anyway",
-					cancelLabel: "Review in Teams first"
+					cancelLabel: canReviewInTeams ? "Review in Teams first" : "Cancel"
 				})) return;
 			}
 			setSyncBusy(true);
@@ -19658,6 +19700,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		const drawerId = `device-drawer-${peerId || "unknown"}`;
 		const presenceState = presenceForPeer(peer);
 		const syncMetaText = lastSyncAt ? `Sync: ${formatTimestamp(lastSyncAt)}` : "Sync: never";
+		const canManageSpaces = canManageSpacesInTeams();
 		const toggleLabel = `${isExpanded ? "Collapse" : "Expand"} device ${displayName}`;
 		const handleOpenChange = (open) => {
 			if (open) setExpandedPeer(peerId);
@@ -19788,7 +19831,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 						children: [
 							scopeReviewRequested ? /* @__PURE__ */ u("div", {
 								className: "peer-meta",
-								children: "Review this device's Space access and advanced rules in Teams if the defaults are too broad."
+								children: canManageSpaces ? "Review this device's Space access and advanced rules in Teams if the defaults are too broad." : "A coordinator or manager can review this device's Space access and advanced rules in Teams if the defaults are too broad."
 							}) : pendingScopeReview ? /* @__PURE__ */ u("div", {
 								className: "peer-meta",
 								children: "Advanced rule review is still pending for this device."
@@ -19917,7 +19960,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 									projectNarrowing.note
 								]
 							}),
-							/* @__PURE__ */ u("div", {
+							canManageSpaces ? /* @__PURE__ */ u("div", {
 								className: "peer-actions",
 								children: /* @__PURE__ */ u("button", {
 									type: "button",
@@ -19925,6 +19968,9 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 									onClick: openTeamsAccessManagement,
 									children: "Manage Spaces in Teams"
 								})
+							}) : /* @__PURE__ */ u("div", {
+								className: "peer-meta",
+								children: "Space access is managed in Teams by a coordinator or manager."
 							}),
 							/* @__PURE__ */ u(SyncInlineFeedback, { feedback })
 						]
@@ -20057,7 +20103,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 						tone: "warning"
 					};
 					else if (peerId && isPeerScopeReviewPending(peerId)) feedback = {
-						message: `Triggered sync for ${peer?.name || (peerId ? peerId.slice(0, 8) : "unknown")}. Review Space access and advanced rules in Teams if this device needs tighter sharing.`,
+						message: `Triggered sync for ${peer?.name || (peerId ? peerId.slice(0, 8) : "unknown")}. ${canManageSpacesInTeams() ? "Review Space access and advanced rules in Teams if this device needs tighter sharing." : "A coordinator or manager can review Space access and advanced rules in Teams if this device needs tighter sharing."}`,
 						tone: "warning"
 					};
 					else feedback = {
@@ -22006,7 +22052,7 @@ For more information, see https://radix-ui.com/primitives/docs/components/${titl
 		try {
 			const runtime = await loadRuntimeInfo();
 			if (!runtime?.version) return;
-			setRuntimeLabel(runtime.version, "c8fe0f7");
+			setRuntimeLabel(runtime.version, "242955b");
 		} catch {}
 	}
 	var lastAnnouncedRefreshState = null;