@fabricorg/sdui-release 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # Changelog
 
+## 0.6.0
+
+### Minor Changes
+
+- 4780974: Close what a sixth review found in the previously unreviewed fix batch, and disclose a breaking change
+  that batch shipped under a minor.
+
+  **Disclosure, first.** `experience-runtime@0.2.0` changed `OfflineReplaySummary.parked` and
+  `expired` from counts to arrays of records. That is breaking for any consumer of 0.1.0 — `parked > 0`
+  becomes permanently false and `if (expired)` permanently true — and its changelog described the
+  counts as still present. This release adds `storeFailures` to the same summary; treat the shape as
+  having changed at 0.2.0.
+
+  **Offline replay.** An authority refusal on a _recovery_ re-execution lands after adapter steps
+  already committed, since the lease worker re-runs authorization but skips succeeded steps rather
+  than undoing them; it is now reported as `unknown`, not `refused`, using the `executionReason` the
+  platform persists. A store that throws mid-replay now degrades one record instead of rejecting the
+  batch and losing every entry already removed. An idempotency conflict is settled — the key was reused
+  for a different command and retrying yields the same conflict forever — so it reaches a person rather
+  than looping. An action-version mismatch is transient, since it fires mid-rollout. An adapter
+  returning nothing keeps the capture queued rather than draining the queue into `unknown`.
+
+  **Release validation.** A grant that no supplied capability publishes now fails validation instead of
+  dying at promotion with "route missing"; ambiguity was scoped to granted references and had covered
+  only the two-or-more case. A contract supplied twice yields exactly one finding — the previous fix
+  still reported each of its granted views as declared twice, and the changelog claimed otherwise. An
+  intent whose action the contract does not declare no longer counts toward ambiguity, matching what
+  promotion resolves.
+
+  **Ports.** `PORT_ID` accepts any segment shape a manifest permits after the first dot, so every
+  namespaced name a capability can declare is a name a port can define. Dotless names remain
+  undefinable by design.
+
 ## 0.5.0
 
 ### Minor Changes

package/dist/index.cjs

@@ -454,7 +454,9 @@ function buildKnownActionIntents(contracts, add, grantedIntents) {
   const occurrences = /* @__PURE__ */ new Map();
   for (const contract of contracts) {
     const experience = contract.extensions?.["fabric.experience/v1"];
+    const declaredActions = new Set(contract.actions.map((action) => action.actionId));
     for (const intent of experience?.actionIntents ?? []) {
+      if (!declaredActions.has(intent.actionId)) continue;
       const shortName2 = intent.name.startsWith(`${contract.namespace}.`) ? intent.name.slice(contract.namespace.length + 1) : intent.name;
       const reference = `${contract.namespace}/${shortName2}`;
       if (grantedIntents === void 0 || grantedIntents.has(`capability://${reference}`)) {
@@ -787,18 +789,40 @@ function validateSduiRelease(input) {
   const knownViews = buildKnownViews(contracts);
   const grantedViews = buildGrantedReferences(input.grants.views, "grants.views");
   const grantedIntents = buildGrantedReferences(input.grants.intents, "grants.intents");
-  const knownIntents = buildKnownActionIntents(contracts, add, grantedIntents);
-  reportAmbiguousGrantedViews(contracts, grantedViews, add);
   const contractNamespaces = /* @__PURE__ */ new Set();
-  for (const contract of contracts) {
+  const distinctContracts = contracts.filter((contract) => {
     if (contractNamespaces.has(contract.namespace)) {
       add(
         "ambiguous_capability_reference",
         `contracts.${contract.namespace}`,
         `contract for "${contract.namespace}" is supplied more than once`
       );
+      return false;
     }
     contractNamespaces.add(contract.namespace);
+    return true;
+  });
+  const knownIntents = buildKnownActionIntents(distinctContracts, add, grantedIntents);
+  reportAmbiguousGrantedViews(distinctContracts, grantedViews, add);
+  for (const reference of grantedViews) {
+    const parsed = parseCapabilityRef(reference);
+    if (parsed && !knownViews.has(`${parsed.namespace}/${parsed.name}`)) {
+      add(
+        "unauthorized_data_ref",
+        `grants.views.${reference}`,
+        `release grants "${reference}", which no supplied capability publishes; promotion would fail to route it`
+      );
+    }
+  }
+  for (const reference of grantedIntents) {
+    const parsed = parseCapabilityRef(reference);
+    if (parsed && !knownIntents.has(`${parsed.namespace}/${parsed.name}`)) {
+      add(
+        "mutation_bypass",
+        `grants.intents.${reference}`,
+        `release grants "${reference}", which no supplied capability declares as an intent; promotion would fail to route it`
+      );
+    }
   }
   validateIntentActionDeclarations(contracts, add);
   const fragmentGrants = /* @__PURE__ */ new Map();