@fabrika/control-contract 0.5.0 → 0.5.2

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@fabrika/control-contract",
-	"version": "0.5.0",
+	"version": "0.5.2",
 	"type": "module",
 	"repository": {
 		"type": "git",
@@ -25,8 +25,8 @@
 	},
 	"dependencies": {
 		"zod": "^3.25.76",
-		"@fabrika/auth-core": "0.5.0",
-		"@fabrika/app": "0.5.0",
-		"@fabrika/provider-contract": "0.5.0"
+		"@fabrika/auth-core": "0.5.2",
+		"@fabrika/app": "0.5.2",
+		"@fabrika/provider-contract": "0.5.2"
 	}
 }

package/src/index.ts

@@ -218,10 +218,10 @@ export interface AppEnvDto {
 	/** The run whose snapshot is this environment's active access; null until a run publishes one. */
 	publishedRunId: string | null
 	/**
-	 * The published snapshot's steps off the paved road, one line each: the reach its sites declare and the database code
-	 * its migrations declare. Each needs closer review; listed whether or not the environment is protected.
+	 * The published snapshot's steps off the paved road, grouped by the site or migration that takes them: the reach its
+	 * sites declare and the database code its migrations declare. Listed whether or not the environment is protected.
 	 */
-	deviations: string[]
+	deviationSubjects: DeviationSubjectDto[]
 	namespaceId: string | null
 	provider: string
 	target: ProviderEnvelopeDto
@@ -229,6 +229,14 @@ export interface AppEnvDto {
 	createdAt: number
 }
 
+/** One endpoint, job or migration of a published snapshot and its steps off the paved road. */
+export interface DeviationSubjectDto {
+	/** `Endpoint \`id\``, `Job \`name\`` or `Migration \`file\``. */
+	subject: string
+	/** Each step, phrased to follow the subject: `declares raw SQL (\`read\`)`. */
+	steps: string[]
+}
+
 export interface PutAppEnvRequest {
 	domain?: string | null
 	publicOrigin?: string | null

package/src/rpc.ts

@@ -165,6 +165,7 @@ export interface ControlRpcContract {
 		secrets: {
 			list: RpcProcedure<AppIdInput, ListResponse<AppSecretDto>>
 			put: RpcProcedure<PutAppSecretInput, AppSecretDto>
+			/** Removes the value where it is stored (vault or provider), then the row; a failed value delete keeps the row. */
 			delete: RpcProcedure<AppNamedValueInput, OkResponse>
 		}
 		variables: {
@@ -176,6 +177,7 @@ export interface ControlRpcContract {
 	vault: {
 		set: RpcProcedure<SecretValueInput, SecretValueResponse>
 		rotate: RpcProcedure<SecretValueInput, OkResponse>
+		/** The same operation as `apps.secrets.delete`. */
 		delete: RpcProcedure<AppNamedValueInput, OkResponse>
 	}
 	namespaces: {
@@ -192,6 +194,8 @@ export interface ControlRpcContract {
 	}
 	runs: {
 		list: RpcProcedure<RunListInput, CursorList<RunDto>>
+		/** Per app environment, its newest finished run when that run failed: a later finished run supersedes a failure. */
+		latestFailures: RpcProcedure<void, ListResponse<RunDto>>
 		get: RpcProcedure<RunIdInput, RunDto>
 		log: RpcProcedure<RunIdInput, RunLogResponse>
 		tail: RpcProcedure<TailRunInput, RunTailResponse>