@com55/node-red-ai-access 0.2.0-beta.8 → 0.2.0-beta.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -6,6 +6,28 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
6
6
  and this project adheres to
7
7
  [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
8
8
 
9
+ ## [0.2.0-beta.9] - 2026-11-02
10
+
11
+ - Redesign the dashboard with a GitHub-Settings-style grouped left sidebar and
12
+ inline SVG icons. Show one section at a time with hash routing and browser
13
+ back/forward navigation, single-column rows, a 1200px container and a narrow
14
+ top menu. Improve current-page semantics, group labels and heading focus
15
+ (#110).
16
+ - Harden the approval queue against deployments that finish after the
17
+ five-minute cap. Block approvals with `deploy_outcome_unknown` until
18
+ settlement, restart or an attempt-matched "Confirm live checked", unless an
19
+ audited override is used; allow rejection with a warning. Audit late
20
+ overwrites across tabs, alert on affected later decisions, show a dashboard
21
+ banner and mark proposals that landed after withdrawal (#111).
22
+ - Keep `outputs`, `wires` and switch `rules` coupled during rebase for every
23
+ node type. Preserve the owner acknowledgement flag when an unchanged
24
+ replacement body still differs from base (#111).
25
+ - Fix OpenAPI loading in the CommonJS build with `import.meta` shims and an
26
+ `__dirname` fallback (#111).
27
+ - Reuse production builds in tests through a content-hash build stamp, with
28
+ `SKIP_TEST_BUILD=1` support (#111). Exclude `dist/.production-build-hash` from
29
+ the npm package.
30
+
9
31
  ## [0.2.0-beta.8] - 2026-10-29
10
32
 
11
33
  - Proposal review shows human conflict reasons and Base / Live / Proposed field
package/README.md CHANGED
@@ -418,22 +418,28 @@ minute hard cap is reached. Before the cap, a late success marks the proposal
418
418
  approved with its `resultRev`; a late failure clears `deployPending` and keeps
419
419
  it pending for retry. At the cap the queue and proposal lock are released,
420
420
  `deployPending.queueReleased` becomes true, and the card asks reviewers to check
421
- the live flow before approving again. Later runtime settlement leaves this
422
- unknown-outcome record unchanged. Every subsequent approval re-reads live flows
423
- before rebasing and deploying, recognizing already-applied results. Queued
424
- approvals time out after 60 seconds with **504** `approve_queue_timeout` without
425
- deploying. Queued proposals can still be rejected or withdrawn; their approvals
426
- then return `proposal_not_pending` when dequeued. These three deadlines are
427
- configurable in `settings.js` under `aiAccess` (positive milliseconds; invalid
428
- values use the defaults shown above). When choosing **proposed** during conflict
429
- resolution, unchanged secret spans keep their live editor values. If spans
430
- cannot be aligned safely, proposed values are retained with a
431
- `secret_may_revert` warning on the dashboard card. Deliberately deleted secret
432
- spans do not raise this warning. Deleting one of several identical secret lines
433
- while their live values changed keeps the proposal in conflict; resolve that
434
- field against the live flow or choose **live**. Changed env arrays with
435
- duplicate names show `duplicate_env_keys`, since pairing by name is ambiguous
436
- when entries are reordered.
421
+ the live flow before approving again. Approvals remain blocked until settlement
422
+ or a matching confirm-live-checked action, unless explicitly overridden with an
423
+ audit entry. Late settlement clears the matching unknown-outcome record. A late
424
+ deploy that changes other tabs writes a warning and a `late_deploy_overwrite`
425
+ audit entry, even when only editor changes were overwritten. Closed proposals
426
+ are alerted only if their decision changed after the cap snapshot. A withdrawn
427
+ proposal keeps its decision and shows “Landed after withdraw” if its deploy
428
+ lands. Every subsequent approval re-reads live flows before rebasing and
429
+ deploying, recognizing already-applied results. Queued approvals time out after
430
+ 60 seconds with **504** `approve_queue_timeout` without deploying. Queued
431
+ proposals can still be rejected or withdrawn; their approvals then return
432
+ `proposal_not_pending` when dequeued. These three deadlines are configurable in
433
+ `settings.js` under `aiAccess` (positive milliseconds; invalid values use the
434
+ defaults shown above). When choosing **proposed** during conflict resolution,
435
+ unchanged secret spans keep their live editor values. If spans cannot be aligned
436
+ safely, proposed values are retained with a `secret_may_revert` warning on the
437
+ dashboard card. Deliberately deleted secret spans do not raise this warning.
438
+ Deleting one of several identical secret lines while their live values changed
439
+ keeps the proposal in conflict; resolve that field against the live flow or
440
+ choose **live**. Changed env arrays with duplicate names show
441
+ `duplicate_env_keys`, since pairing by name is ambiguous when entries are
442
+ reordered.
437
443
 
438
444
  Open proposals merge changes per node and tab field. Different fields on the
439
445
  same node merge automatically; changes to the same field conflict even when both
package/ai-access.html CHANGED
@@ -14,7 +14,7 @@
14
14
  }
15
15
  window.__com55AiAccessSidebarLoading = true;
16
16
 
17
- var EDITOR_SIDEBAR_ASSET_VERSION = '0.2.0-beta.8';
17
+ var EDITOR_SIDEBAR_ASSET_VERSION = '0.2.0-beta.9';
18
18
  var root = (RED.settings.httpAdminRoot || '/').replace(/\/$/, '');
19
19
  var src =
20
20
  (root || '') +