@fabricorg/sdui-release 0.7.0 → 0.7.2

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.7.2
+
+### Patch Changes
+
+- The 0.7.1 tarball on the registry was packed from a stale build and does not contain the change its changelog describes: `deriveAuthorizationGrants` still emitted a versionless grant for a view published at two versions, and the `unaddressable` list was absent. This version carries that change. The publish script now builds every package before it packs, so a tarball cannot again lag its source.
+
+## 0.7.1
+
+### Patch Changes
+
+- e41c1f5: `deriveAuthorizationGrants` stopped emitting intents whose action the contract does not declare, on the grounds that such a grant is one validation refuses and promotion could never have routed. The view loop three lines above had the same defect and was not fixed: a view published at two versions, which is a first-class pattern, produced one versionless reference that validation reports as `ambiguous_capability_reference` and promotion cannot route. Those views are now left out of `grants.views` and reported in a new `unaddressable` list on the result, with the reference and the versions that made it unaddressable.
+
 ## 0.7.0
 
 ### Minor Changes

package/dist/index.cjs

@@ -1118,6 +1118,7 @@ function deriveAuthorizationGrants(contracts, held, options = {}) {
   const views = [];
   const intents = [];
   const withheld = [];
+  const unaddressable = [];
   for (const contract of contracts) {
     if (undeclared === "withhold" && !declaresAnyRequirement(contract)) {
       withheld.push({ namespace: contract.namespace, missing: { kind: "permission", name: "(none declared)" } });
@@ -1128,8 +1129,16 @@ function deriveAuthorizationGrants(contracts, held, options = {}) {
       withheld.push({ namespace: contract.namespace, missing });
       continue;
     }
+    const versionsByReference = /* @__PURE__ */ new Map();
     for (const view of contract.views) {
       const reference = `capability://${contract.namespace}/${shortName(view.name, contract.namespace, "/")}`;
+      versionsByReference.set(reference, /* @__PURE__ */ new Set([...versionsByReference.get(reference) ?? [], String(view.version)]));
+    }
+    for (const [reference, versions] of versionsByReference) {
+      if (versions.size > 1) {
+        unaddressable.push({ namespace: contract.namespace, reference, versions: [...versions].sort() });
+        continue;
+      }
       if (!bound || bound.views.has(reference)) views.push(reference);
     }
     const declaredActions = new Set(contract.actions.map((action) => action.actionId));
@@ -1141,7 +1150,8 @@ function deriveAuthorizationGrants(contracts, held, options = {}) {
   }
   return {
     grants: { views: [...new Set(views)].sort(), intents: [...new Set(intents)].sort() },
-    withheld: withheld.sort((left, right) => left.namespace < right.namespace ? -1 : left.namespace > right.namespace ? 1 : 0)
+    withheld: withheld.sort((left, right) => left.namespace < right.namespace ? -1 : left.namespace > right.namespace ? 1 : 0),
+    unaddressable: unaddressable.sort((left, right) => left.reference < right.reference ? -1 : left.reference > right.reference ? 1 : 0)
   };
 }
 function declaresAnyRequirement(contract) {