@convokitapp/vue-ui 0.2.2 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 0.3.0
+
+- Ignore late typing failures after newer input or connection interruption.
+
+- Reject stale revisions even while a media-only insertion is waiting to render.
+
+- Hydrate related attachments through authenticated message lookup after raw row events; keep text responsive and preserve media during edits.
+- Bound and coalesce attachment lookups, guard stale/deleted/session-retired responses, and reconcile all viewed live messages in initially empty rooms.
+- Require `getMessage(id)` in custom UI adapters and release the composer without waiting for typing-stop HTTP.
+- Exercise incoming file/image rendering through the actual SDK and Supabase protocol with realistic relation-free row events.
+- Normalize Vue class attributes using Vue's own helper, fixing the Vue 3.4 minimum-version type build.
+
+- Bind room and inbox state to the owning SDK login, including same-user replacement and logout.
+- Reconcile the complete viewed history on private-channel reconnect; use value cursors for older pages.
+- Consume typed row changes and ID-only deletions without restoring deleted text/files on late responses.
+- Use monotonic server read positions and expiring, session-owned typing state.
+- Require the new custom-adapter lifecycle/deletion/cursor contract; no compatibility fallback.
+- Add private-source CI, actual-SDK protocol tests and rendered React/Vue regression checks. Requires core SDK 0.3.x with automatic private-topic discovery.
+
 ## 0.2.2
 
 - Show `Sending…` for optimistic messages instead of a device-clock timestamp that can jump after acknowledgement.

package/PARITY.md

@@ -13,7 +13,7 @@ while using Vue-native composition patterns.
 | Replaceable SDK boundary | `ConvoKitUiClient` | `ConvoKitUiClient` | `ConvoKitUiClient` |
 | Conversation state | Controller | `useConversation` | `useConversation` |
 | Conversation-list state | Controller | `useConversationList` | `useConversationList` |
-| Offset pagination and de-duplication | Yes | Yes | Yes |
+| Inbox offset pagination and de-duplication | Yes | Yes | Yes |
 | Search, archived, participant, predicate, sort filters | Yes | Yes | Yes |
 | Realtime messages, typing, reads | Yes | Yes | Yes |
 | Pending state without provisional timestamps or receipts | Yes | Yes | Yes |
@@ -32,3 +32,10 @@ Vue also exposes controlled/uncontrolled composer text through `v-model`,
 per-part `classNames` and `styles`, `unstyled` mode, native root attributes,
 image loading policy, time formatting, scroll behavior controls, callback props,
 and exposed composable controllers.
+## Unreleased recovery parity
+
+Room and inbox session eviction, value-cursor history, full viewed-range reconnect
+reconciliation, ID-only deletions and server-sourced read positions are tested in
+this feature branch. They require the unpublished core SDK recovery contract.
+The parity script checks API presence only; the controller, rendered-view and
+actual-SDK protocol tests verify behavior. See README 0.3.0 behavior and integration notes.

package/README.md

@@ -11,7 +11,61 @@ React package: system typography, separated rows, subtle borders, compact
 actions, and restrained radii. It remains framework-CSS independent and does
 not require Tailwind in the host application.
 
-## Install
+## 0.3.0 session and history recovery
+
+This release requires JavaScript SDK 0.3.x and the coordinated backend. The core
+SDK discovers current private room/app topics automatically and rejoins when
+membership changes; no additional customer configuration is needed.
+
+- The default adapter exposes a session identity that stays stable on token
+  renewal and changes on every new login, including the same user ID. Room and
+  inbox caches are cleared when that session ends. After reconnecting a user,
+  update application authentication state so the hook/composable can bind the
+  new session (or recreate the adapter).
+- Initial history and older pages preserve live changes received while loading.
+  Message pagination uses newest-first `beforeCreatedAt`/`beforeId` values,
+  not an offset calculated from the current visible row count. Page sizes are
+  integers from 1 through 100.
+- `refresh()` and successful room-channel joins reconcile the **entire viewed
+  history range**, retaining the old snapshot until all required pages succeed.
+  `isReconciling` exposes this background work. Transient failures preserve the
+  view for retry; authoritative history 401/403/404 responses clear it.
+- Typed INSERT/UPDATE events and private ID-only deletion events are distinct.
+  Deletion removes text and attachment cards, and a late HTTP response cannot
+  restore a known-deleted message. A reconnect also removes deletions missed
+  while offline.
+- Raw Postgres events contain the message row, not its related attachments.
+  The UI displays text immediately and calls authenticated `getMessage(id)`
+  for the complete message, including files and images. Existing attachments
+  remain visible during edits until the full response confirms a change;
+  media-only messages wait for that response instead of showing empty bubbles.
+  This adds a REST lookup for observed row changes, limited to eight concurrent
+  lookups per room store and coalesced by message ID. Obsolete responses cannot
+  restore deleted messages or data from a previous login.
+- Read receipts use persisted participant positions and server read events,
+  monotonically. A successful mark-read request does not fabricate a timestamp
+  from the device clock. Remote typing expires and clears on disconnect.
+- Pending sends are bound to their original room/session. Reconciliation uses
+  the returned message ID, never a guess based on identical text or file count.
+  Without server-provided request IDs, a Realtime echo can briefly coexist with
+  its pending row until the HTTP acknowledgement identifies it.
+- Custom `ConvoKitUiClient` adapters must implement `sessionIdentity`,
+  `onConnectionEvent` (including `onSessionEnded`), typed `onMessage`,
+  `onMessageDeleted`, `getMessage(id)`, and paired message cursors. The message
+  lookup must enforce the same app/room authorization and return the complete
+  current record, including an authoritative attachment list. Custom inbox page
+  loaders must be scoped to the same authenticated app and return bounded pages; their
+  filters restart at offset zero. No legacy adapter fallback is provided.
+
+The managed API default and customer token-provider workflow are unchanged.
+The SDK discovers the Supabase URL and publishable key automatically; customers
+do not configure those values or ship a backend secret.
+
+The inbox still uses the existing paged REST contract. Session eviction is
+implemented, but live inbox/cascade invalidation requires the separate backend
+event contract; refresh or reopen the inbox after those changes.
+
+## Install published packages
 
 ```bash
 npm install @convokitapp/sdk @convokitapp/vue-ui vue