@feltdb/core 0.12.2 → 0.15.0

package/dist/local-state-lock.js

@@ -0,0 +1,225 @@
+/**
+ * Exclusive ownership of a local state directory.
+ *
+ * The local file runtime is safe for several processes at the level of a
+ * single commit (each mutation takes `state.lock`). An application usually
+ * wants more: that no *other* process opens its state at all, because two
+ * application processes over one directory each believe they are the only
+ * writer of their caches, schedules, and in-process subscriptions.
+ *
+ * `acquire` creates `owner.lock` in the directory with `O_EXCL` and records
+ * the holder (`pid`, `host`, a random token). A second process finds it and is
+ * refused with `LocalStateLockedError`. Handles in the same process share the
+ * lock and the last `release` removes it; process exit removes it too.
+ *
+ * A lock whose holder is gone is recoverable: when the recorded host is this
+ * host and `process.kill(pid, 0)` reports no such process, the lock is taken
+ * over. The takeover renames the old lock aside and checks it is the one that
+ * was judged stale before deleting it, so two processes recovering the same
+ * stale lock cannot both win. A lock recorded by another host, or one that
+ * cannot be read, is never judged stale (it is refused, and the error names
+ * the file to remove by hand). A lock records its directory's real path, so a
+ * lock copied with the directory (a backup, an upgrade's verification copy)
+ * does not hold the copy.
+ *
+ * This is not authority state: it holds no data, and removing it never
+ * changes what the store contains.
+ */
+import * as nodeFs from 'fs';
+import * as nodeOs from 'os';
+import * as nodePath from 'path';
+import { LocalStateLockedError } from './error-codes.js';
+export const LOCAL_STATE_LOCK_FILE = 'owner.lock';
+const FORMAT = 'feltdb.local-owner-lock@1';
+/** Locks this process holds, by lock path. */
+const held = new Map();
+let exitHookInstalled = false;
+function randomToken() {
+    return globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
+}
+function readRecord(path) {
+    let text;
+    try {
+        text = nodeFs.readFileSync(path, 'utf8');
+    }
+    catch (error) {
+        return error.code === 'ENOENT' ? 'missing' : 'unreadable';
+    }
+    try {
+        const value = JSON.parse(text);
+        return value && typeof value === 'object' ? value : 'unreadable';
+    }
+    catch {
+        return 'unreadable';
+    }
+}
+/** True only when the holder is provably gone. */
+function holderIsGone(record) {
+    if (typeof record.pid !== 'number' || !Number.isInteger(record.pid) || record.pid < 1)
+        return false;
+    if (record.host !== nodeOs.hostname())
+        return false;
+    try {
+        process.kill(record.pid, 0);
+        return false;
+    }
+    catch (error) {
+        // EPERM: the process exists but belongs to another user.
+        return error.code === 'ESRCH';
+    }
+}
+function installExitHook() {
+    if (exitHookInstalled || typeof process?.once !== 'function')
+        return;
+    exitHookInstalled = true;
+    process.once('exit', () => {
+        for (const lock of held.values())
+            removeIfOurs(lock.path, lock.token);
+        held.clear();
+    });
+}
+function removeIfOurs(path, token) {
+    const record = readRecord(path);
+    if (typeof record === 'object' && record.token === token) {
+        try {
+            nodeFs.unlinkSync(path);
+        }
+        catch { /* already gone */ }
+    }
+}
+/** Write a new lock file, or return false when one exists. */
+function tryCreate(path, record) {
+    let fd;
+    try {
+        fd = nodeFs.openSync(path, 'wx', 0o600);
+    }
+    catch (error) {
+        if (error.code === 'EEXIST')
+            return false;
+        throw error;
+    }
+    try {
+        nodeFs.writeFileSync(fd, JSON.stringify(record));
+        nodeFs.fsyncSync(fd);
+    }
+    finally {
+        nodeFs.closeSync(fd);
+    }
+    return true;
+}
+/**
+ * Move a stale lock out of the way, but only the exact lock judged stale.
+ * Returns true when the path is now free to create.
+ */
+function removeStale(path, stale) {
+    const aside = `${path}.stale-${process.pid}-${randomToken()}`;
+    try {
+        nodeFs.renameSync(path, aside);
+    }
+    catch (error) {
+        // Someone else removed it first: the path is free (or about to be taken).
+        return error.code === 'ENOENT';
+    }
+    const moved = readRecord(aside);
+    if (typeof moved === 'object' && moved.token === stale.token && moved.pid === stale.pid) {
+        try {
+            nodeFs.unlinkSync(aside);
+        }
+        catch { /* best effort */ }
+        return true;
+    }
+    // We moved a fresh lock another process had just created. Put it back if
+    // nothing has replaced it; if something has, leave ours aside and refuse.
+    try {
+        nodeFs.linkSync(aside, path);
+    }
+    catch {
+        /* the path was taken again; the next attempt reads it */
+    }
+    try {
+        nodeFs.unlinkSync(aside);
+    }
+    catch { /* best effort */ }
+    return false;
+}
+/**
+ * Take exclusive ownership of `directory` for this process.
+ * Throws `LocalStateLockedError` when another live process holds it.
+ */
+export function acquireLocalStateLock(directory) {
+    // The real path: two spellings of one directory (a symlink, a relative
+    // path) must find the same lock and the same holder.
+    let real = directory;
+    try {
+        real = nodeFs.realpathSync(directory);
+    }
+    catch { /* not created yet: the caller creates it */ }
+    const path = nodePath.join(real, LOCAL_STATE_LOCK_FILE);
+    const mine = held.get(path);
+    if (mine) {
+        mine.count += 1;
+        return once(() => release(path));
+    }
+    const record = {
+        format: FORMAT,
+        directory: real,
+        pid: process.pid,
+        host: nodeOs.hostname(),
+        token: randomToken(),
+        acquiredAt: new Date().toISOString(),
+    };
+    for (let attempt = 0; attempt < 5; attempt += 1) {
+        if (tryCreate(path, record)) {
+            held.set(path, { token: record.token, path, count: 1 });
+            installExitHook();
+            return once(() => release(path));
+        }
+        const existing = readRecord(path);
+        if (existing === 'missing')
+            continue;
+        if (existing === 'unreadable') {
+            throw new LocalStateLockedError(path, {}, 'The lock file could not be read, so its holder cannot be judged gone.');
+        }
+        if (typeof existing.directory === 'string' && existing.directory !== real) {
+            // Copied along with the directory (a backup, a verification copy): it
+            // names its original directory, not this one, so nobody holds this one.
+            if (removeStale(path, existing))
+                continue;
+        }
+        else if (existing.pid === process.pid && existing.host === nodeOs.hostname()) {
+            // Left by an earlier run that had this pid (a restarted container), or
+            // by this process before a release that never happened. Either way no
+            // other process holds it: take it over.
+            if (removeStale(path, existing))
+                continue;
+        }
+        else if (holderIsGone(existing)) {
+            if (removeStale(path, existing))
+                continue;
+        }
+        else {
+            throw new LocalStateLockedError(path, { pid: existing.pid, host: existing.host, acquiredAt: existing.acquiredAt }, existing.host && existing.host !== nodeOs.hostname()
+                ? 'It was locked from another host, so this process cannot tell whether that holder is still running.'
+                : undefined);
+        }
+    }
+    const last = readRecord(path);
+    throw new LocalStateLockedError(path, typeof last === 'object' ? { pid: last.pid, host: last.host, acquiredAt: last.acquiredAt } : {}, 'Another process kept taking the lock while this one tried to recover it.');
+}
+function release(path) {
+    const mine = held.get(path);
+    if (!mine)
+        return;
+    mine.count -= 1;
+    if (mine.count > 0)
+        return;
+    held.delete(path);
+    removeIfOurs(path, mine.token);
+}
+function once(action) {
+    let done = false;
+    return () => { if (!done) {
+        done = true;
+        action();
+    } };
+}

package/dist/reactive-graph.d.ts

@@ -4,9 +4,6 @@
  * Tracks relationships between collections (base → derived → further derived)
  * and propagates mutations automatically without polling.
  */
-/**
- * Represents a change in the collection
- */
 export interface CollectionChange<T> {
     type: 'insert' | 'update' | 'delete';
     key: string;

package/dist/reactive-graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reactive-graph.d.ts","sourceRoot":"","sources":["../src/reactive-graph.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;GAEG;AACH,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC,qEAAqE;IACrE,OAAO,CAAC,YAAY,CAAuC;IAE3D,4DAA4D;IAC5D,OAAO,CAAC,WAAW,CAAwF;IAE3G,oEAAoE;IACpE,OAAO,CAAC,aAAa,CAAmD;IAExE;;OAEG;IACH,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,IAAI;IAO/E;;OAEG;IACH,SAAS,CACP,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAChE,MAAM,IAAI;IAgBb;;OAEG;IACG,UAAU,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBvF;;OAEG;IACH,gBAAgB,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,EAAE;IAKlE;;OAEG;IACH,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;IAIhD;;OAEG;IACH,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM;IAIlD;;OAEG;IACH,aAAa,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO;IAK9C;;OAEG;IACH,aAAa,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,EAAE;CAIhD;AAKD;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,uBAAuB,CAKpE;AAED;;GAEG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD"}
+{"version":3,"file":"reactive-graph.d.ts","sourceRoot":"","sources":["../src/reactive-graph.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC,qEAAqE;IACrE,OAAO,CAAC,YAAY,CAAuC;IAE3D,4DAA4D;IAC5D,OAAO,CAAC,WAAW,CAAwF;IAE3G,oEAAoE;IACpE,OAAO,CAAC,aAAa,CAAmD;IAExE;;OAEG;IACH,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,IAAI;IAO/E;;OAEG;IACH,SAAS,CACP,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAChE,MAAM,IAAI;IAgBb;;OAEG;IACG,UAAU,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA6BvF;;OAEG;IACH,gBAAgB,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,EAAE;IAKlE;;OAEG;IACH,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;IAIhD;;OAEG;IACH,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM;IAIlD;;OAEG;IACH,aAAa,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO;IAK9C;;OAEG;IACH,aAAa,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,EAAE;CAIhD;AAKD;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,uBAAuB,CAKpE;AAED;;GAEG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD"}

package/dist/reactive-graph.js

@@ -4,6 +4,11 @@
  * Tracks relationships between collections (base → derived → further derived)
  * and propagates mutations automatically without polling.
  */
+/**
+ * Represents a change in the collection
+ */
+/** Recent changes kept per collection for differential updates. */
+const RECENT_CHANGE_LIMIT = 256;
 /**
  * Tracks dependencies between collections and propagates changes
  */
@@ -48,7 +53,12 @@ export class ReactiveDependencyGraph {
         if (!this.recentChanges.has(collectionName)) {
             this.recentChanges.set(collectionName, []);
         }
-        this.recentChanges.get(collectionName).push(change);
+        const recent = this.recentChanges.get(collectionName);
+        recent.push(change);
+        // A differential-update window, not a history: FeltDB's history is the
+        // authority's. Bounded so a long-lived process does not grow without end.
+        if (recent.length > RECENT_CHANGE_LIMIT)
+            recent.splice(0, recent.length - RECENT_CHANGE_LIMIT);
         // Notify subscribers of this collection
         const subscribers = this.subscribers.get(collectionName);
         if (subscribers) {

package/dist/runtime-registry.d.ts

@@ -12,8 +12,13 @@
  * lets a browser application import `@feltdb/core` at all.
  */
 import type { JsDb } from './feltdb.js';
+/** Options `createFeltDB` passes through to a platform runtime. */
+export interface RuntimeFactoryOptions {
+    /** Local file runtime: how the state directory is opened. */
+    access?: 'shared' | 'exclusive';
+}
 /** Builds a runtime from the option that selected it. */
-export type RuntimeFactory = (target: string) => JsDb;
+export type RuntimeFactory = (target: string, options?: RuntimeFactoryOptions) => JsDb;
 /**
  * Make a runtime available to `createFeltDB`.
  *
@@ -28,5 +33,5 @@ export declare function resolveRuntime(name: string): RuntimeFactory | undefined
  * because "cannot resolve fs" is not an actionable error for someone who just
  * wants a database in a browser.
  */
-export declare function requireRuntime(name: string, target: string, guidance: string): JsDb;
+export declare function requireRuntime(name: string, target: string, guidance: string, options?: RuntimeFactoryOptions): JsDb;
 //# sourceMappingURL=runtime-registry.d.ts.map

package/dist/runtime-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-registry.d.ts","sourceRoot":"","sources":["../src/runtime-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAExC,yDAAyD;AACzD,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;AAItD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAE3E;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEvE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAInF"}
+{"version":3,"file":"runtime-registry.d.ts","sourceRoot":"","sources":["../src/runtime-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAExC,mEAAmE;AACnE,MAAM,WAAW,qBAAqB;IACpC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;CACjC;AAED,yDAAyD;AACzD,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,KAAK,IAAI,CAAC;AAIvF;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAE3E;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEvE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAIpH"}

package/dist/runtime-registry.js

@@ -30,9 +30,9 @@ export function resolveRuntime(name) {
  * because "cannot resolve fs" is not an actionable error for someone who just
  * wants a database in a browser.
  */
-export function requireRuntime(name, target, guidance) {
+export function requireRuntime(name, target, guidance, options) {
     const factory = resolveRuntime(name);
     if (!factory)
         throw new Error(guidance);
-    return factory(target);
+    return factory(target, options);
 }

package/dist/studio/{KeyManagementPanel-D5FMvvU9.js → KeyManagementPanel-skUNnKRw.js}

@@ -29,11 +29,11 @@ var a = {
 	revokeBtn: "_revokeBtn_1cbba_250",
 	info: "_info_1cbba_265"
 }, o = ({ apiUrl: o, token: s, namespace: c = "app-store-sherpa", onConfigure: l }) => {
-	let [u, d] = t([]), [f, p] = t(!0), [m, h] = t(null), [g, _] = t(!1), [v, y] = t(null), [b, x] = t(""), [S, C] = t([
+	let [u, d] = t([]), [f, p] = t(!0), [m, h] = t(null), [g, _] = t(!1), [v, y] = t(null), [b, x] = t(""), [S, C] = t(!1), [w, T] = t([
 		"state:read",
 		"state:write",
 		"events:read"
-	]), w = [
+	]), E = [
 		"state:read",
 		"state:write",
 		"events:read",
@@ -41,7 +41,7 @@ var a = {
 		"backup:restore",
 		"admin:logs",
 		"admin:restart"
-	], T = [
+	], D = [
 		"state:read",
 		"state:write",
 		"events:read",
@@ -51,9 +51,9 @@ var a = {
 		"admin:restart"
 	];
 	e(() => {
-		E();
+		O();
 	}, [o, s]);
-	let E = async () => {
+	let O = async () => {
 		try {
 			if (p(!0), h(null), !o) {
 				h("A server or managed API URL is not configured."), p(!1);
@@ -65,8 +65,11 @@ var a = {
 			});
 			if (e.status === 401) throw Error("Unauthorized: Invalid or expired API token");
 			if (e.status === 403) throw Error("Forbidden: Your account does not have permission to manage API keys");
-			if (e.status === 404) throw Error("This authority does not offer API key management. The local development authority has no keys to list; a managed or self-hosted instance does.");
-			if (!e.ok) throw Error(`Failed to fetch keys: ${e.status} ${e.statusText}`);
+			if (e.status === 404) {
+				C(!0), d([]);
+				return;
+			}
+			if (C(!1), !e.ok) throw Error(`Failed to fetch keys: ${e.status} ${e.statusText}`);
 			let t = await e.json();
 			d(t.tokens || []);
 		} catch (e) {
@@ -75,7 +78,7 @@ var a = {
 		} finally {
 			p(!1);
 		}
-	}, D = async (e) => {
+	}, k = async (e) => {
 		e.preventDefault();
 		try {
 			let e = await fetch(`${o}/api/keys`, {
@@ -87,7 +90,7 @@ var a = {
 				body: JSON.stringify({
 					id: b || `key-${Date.now()}`,
 					namespace: c,
-					scopes: S.length > 0 ? S : T
+					scopes: w.length > 0 ? w : D
 				}),
 				signal: AbortSignal.timeout(1e4)
 			});
@@ -95,12 +98,12 @@ var a = {
 			if (e.status === 409) throw Error("A key with this name already exists");
 			if (!e.ok) throw Error(`Failed to create key: ${e.status} ${e.statusText}`);
 			let t = await e.json();
-			j(t.secret), x(""), C(T), _(!1), await E();
+			N(t.secret), x(""), T(D), _(!1), await O();
 		} catch (e) {
 			let t = e instanceof TypeError ? "Connection error: Unable to reach the API server" : e instanceof Error ? e.message : "Failed to create key";
 			h(t), console.error("Error creating API key:", e);
 		}
-	}, O = async (e) => {
+	}, A = async (e) => {
 		if (confirm(`Revoke key "${e}"? This cannot be undone.`)) try {
 			let t = await fetch(`${o}/api/keys/${e}`, {
 				method: "DELETE",
@@ -110,28 +113,32 @@ var a = {
 			if (t.status === 404) throw Error("Key not found");
 			if (t.status === 401) throw Error("Unauthorized: Invalid or expired API token");
 			if (!t.ok) throw Error(`Failed to revoke key: ${t.status} ${t.statusText}`);
-			await E();
+			await O();
 		} catch (e) {
 			let t = e instanceof TypeError ? "Connection error: Unable to reach the API server" : e instanceof Error ? e.message : "Failed to revoke key";
 			h(t), console.error("Error revoking API key:", e);
 		}
-	}, k = (e, t) => {
+	}, j = (e, t) => {
 		navigator.clipboard.writeText(e), y(t), setTimeout(() => y(null), 2e3);
-	}, [A, j] = t(null);
+	}, [M, N] = t(null);
 	return f ? /* @__PURE__ */ r("div", {
 		className: a.panel,
 		children: "Loading keys..."
 	}) : /* @__PURE__ */ i("div", {
 		className: a.panel,
 		children: [
-			/* @__PURE__ */ i("div", {
+			/* @__PURE__ */ r("div", {
 				className: a.header,
-				children: [/* @__PURE__ */ r("h2", { children: "API Key Management" }), /* @__PURE__ */ r("button", {
+				children: !S && o && /* @__PURE__ */ r("button", {
 					className: a.createButton,
 					onClick: () => _(!g),
-					disabled: !o,
 					children: g ? "✕ Cancel" : "+ New Key"
-				})]
+				})
+			}),
+			S && /* @__PURE__ */ i("div", {
+				className: a.info,
+				"data-availability": "unsupported",
+				children: [/* @__PURE__ */ r("strong", { children: "This instance does not issue API keys." }), /* @__PURE__ */ r("p", { children: "The local development authority is unauthenticated and loopback-only, so there are no keys to create or list. A self-hosted or managed FeltDB server issues them." })]
 			}),
 			m && /* @__PURE__ */ i("div", {
 				className: a.error,
@@ -155,7 +162,7 @@ var a = {
 							]
 						}),
 						/* @__PURE__ */ r("button", {
-							onClick: () => E(),
+							onClick: () => O(),
 							style: {
 								marginTop: "8px",
 								padding: "4px 12px",
@@ -178,19 +185,19 @@ var a = {
 					children: "Open connection settings"
 				})]
 			}),
-			A && /* @__PURE__ */ i("div", {
+			M && /* @__PURE__ */ i("div", {
 				className: a.info,
 				children: [
 					/* @__PURE__ */ r("strong", { children: "New secret — copy it now; it will not be shown again." }),
-					/* @__PURE__ */ r("code", { children: A }),
+					/* @__PURE__ */ r("code", { children: M }),
 					/* @__PURE__ */ r("button", {
-						onClick: () => k(A, "created"),
+						onClick: () => j(M, "created"),
 						children: v === "created" ? "✓ Copied" : "Copy secret"
 					})
 				]
 			}),
-			g && /* @__PURE__ */ i("form", {
-				onSubmit: D,
+			g && !S && /* @__PURE__ */ i("form", {
+				onSubmit: k,
 				className: a.createForm,
 				children: [
 					/* @__PURE__ */ i("div", {
@@ -206,13 +213,13 @@ var a = {
 						className: a.formGroup,
 						children: [/* @__PURE__ */ r("label", { children: "Scopes" }), /* @__PURE__ */ r("div", {
 							className: a.scopeList,
-							children: w.map((e) => /* @__PURE__ */ i("label", {
+							children: E.map((e) => /* @__PURE__ */ i("label", {
 								className: a.scopeCheckbox,
 								children: [/* @__PURE__ */ r("input", {
 									type: "checkbox",
-									checked: S.includes(e),
+									checked: w.includes(e),
 									onChange: (t) => {
-										t.target.checked ? C([...S, e]) : C(S.filter((t) => t !== e));
+										t.target.checked ? T([...w, e]) : T(w.filter((t) => t !== e));
 									}
 								}), e]
 							}, e))
@@ -225,7 +232,7 @@ var a = {
 					})
 				]
 			}),
-			u.length === 0 ? /* @__PURE__ */ r("div", {
+			S ? null : u.length === 0 ? /* @__PURE__ */ r("div", {
 				className: a.empty,
 				children: "No API keys configured. Create one to get started."
 			}) : /* @__PURE__ */ r("div", {
@@ -260,7 +267,7 @@ var a = {
 							className: a.keyActions,
 							children: /* @__PURE__ */ r("button", {
 								className: a.revokeBtn,
-								onClick: () => O(e.id),
+								onClick: () => A(e.id),
 								disabled: e.revoked,
 								children: "Revoke"
 							})

package/dist/studio/app.d.ts

@@ -20,6 +20,13 @@ export interface ApplicationConnectionNoticeProps {
     registration?: {
         namespace?: string;
     };
+    /**
+     * Whether Studio could ask the development session at all. `unreachable`
+     * means the session did not answer, which says nothing about the
+     * application; without a registration it otherwise reads as waiting.
+     */
+    session?: 'reachable' | 'unreachable';
+    applicationUrl?: string;
 }
 export type StudioConnectionResolution = {
     source: 'explicit-authority' | 'configured-authority';
@@ -38,7 +45,7 @@ export declare function resolveStudioConnection(input: {
 }): StudioConnectionResolution;
 /** A registration proves the application is connected; it does not identify
  * the JavaScript environment in which the application itself executes. */
-export declare function ApplicationConnectionNotice({ registration }: ApplicationConnectionNoticeProps): React.JSX.Element;
+export declare function ApplicationConnectionNotice({ registration, session, applicationUrl }: ApplicationConnectionNoticeProps): React.JSX.Element;
 export declare function StudioApp({ db, remoteUrl, token, namespace, deploymentRuntime, applicationUrl, applicationId, environment, developmentSession, managedPublish, sourceSync, onConnect }: StudioAppProps): React.JSX.Element;
 export default StudioApp;
 //# sourceMappingURL=app.d.ts.map

package/dist/studio/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAsC,MAAM,OAAO,CAAC;AAS3D,OAA4B,EAAE,KAAK,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AACzG,OAAO,EAAa,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAqBjF,OAAO,EAAgC,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAI/E,OAAO,mCAAmC,CAAC;AAC3C,OAAO,yBAAyB,CAAC;AACjC,OAAO,WAAW,CAAC;AACnB,OAAO,mCAAmC,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,YAAY,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,2BAA2B,CAAC;IAC7C,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD;AAED,MAAM,WAAW,gCAAgC;IAC/C,YAAY,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC;AAED,MAAM,MAAM,0BAA0B,GAClC;IAAE,MAAM,EAAE,oBAAoB,GAAG,sBAAsB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,YAAY,EAAE,EAAE,CAAA;CAAE,GACxC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,EAAE,CAAA;CAAE,CAAC;AAE5C,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,0BAA0B,CAU7B;AAED;0EAC0E;AAC1E,wBAAgB,2BAA2B,CAAC,EAAE,YAAY,EAAE,EAAE,gCAAgC,qBAM7F;AAiBD,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,SAAc,EAAE,KAAU,EAAE,SAAqB,EAAE,iBAA6B,EAAE,cAAmB,EAAE,aAAkB,EAAE,WAA0B,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,cAAc,qBAgIjQ;AA+DD,eAAe,SAAS,CAAC"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAsC,MAAM,OAAO,CAAC;AAU3D,OAA4B,EAAE,KAAK,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AACzG,OAAO,EAAa,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAsBjF,OAAO,EAAgC,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAI/E,OAAO,mCAAmC,CAAC;AAC3C,OAAO,yBAAyB,CAAC;AACjC,OAAO,WAAW,CAAC;AACnB,OAAO,mCAAmC,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,YAAY,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,2BAA2B,CAAC;IAC7C,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD;AAED,MAAM,WAAW,gCAAgC;IAC/C,YAAY,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC;;;;OAIG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,0BAA0B,GAClC;IAAE,MAAM,EAAE,oBAAoB,GAAG,sBAAsB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,YAAY,EAAE,EAAE,CAAA;CAAE,GACxC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,EAAE,CAAA;CAAE,CAAC;AAE5C,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,0BAA0B,CAU7B;AAED;0EAC0E;AAC1E,wBAAgB,2BAA2B,CAAC,EAAE,YAAY,EAAE,OAAqB,EAAE,cAAc,EAAE,EAAE,gCAAgC,qBAsBpI;AAGD,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,SAAc,EAAE,KAAU,EAAE,SAAqB,EAAE,iBAA6B,EAAE,cAAmB,EAAE,aAAkB,EAAE,WAA0B,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,cAAc,qBAqIjQ;AAiED,eAAe,SAAS,CAAC"}

package/dist/studio/components/KeyManagementPanel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"KeyManagementPanel.d.ts","sourceRoot":"","sources":["../../src/components/KeyManagementPanel.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA8B,MAAM,OAAO,CAAC;AAWnD,UAAU,uBAAuB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;CAC1B;AAED,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAmUhE,CAAC"}
+{"version":3,"file":"KeyManagementPanel.d.ts","sourceRoot":"","sources":["../../src/components/KeyManagementPanel.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA8B,MAAM,OAAO,CAAC;AAWnD,UAAU,uBAAuB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;CAC1B;AAED,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAgVhE,CAAC"}

package/dist/studio/components/KeyManagementPanel.js

@@ -1,2 +1,2 @@
-import { t as e } from "../KeyManagementPanel-D5FMvvU9.js";
+import { t as e } from "../KeyManagementPanel-skUNnKRw.js";
 export { e as KeyManagementPanel };

package/dist/studio/components/index.js

@@ -1,4 +1,4 @@
-import { _ as e, a as t, b as n, c as r, d as i, f as a, g as o, h as s, i as c, l, m as u, n as d, o as f, p, r as m, s as h, t as g, u as _, v, y } from "../components-B4eKIUN5.js";
-import { t as b } from "../KeyManagementPanel-D5FMvvU9.js";
+import { _ as e, a as t, b as n, c as r, d as i, f as a, g as o, h as s, i as c, l, m as u, n as d, o as f, p, r as m, s as h, t as g, u as _, v, y } from "../components-CJmzntBi.js";
+import { t as b } from "../KeyManagementPanel-skUNnKRw.js";
 import { ManagedInstancePanel as x } from "./ManagedInstancePanel.js";
 export { v as AgentExplorer, s as ApplicationDesigner, u as AskFeltDB, l as CapabilityExplorer, m as ConflictExplorer, _ as ContractInspector, n as ExecutionViewer, o as GlobalSearch, g as HealthCenter, b as KeyManagementPanel, x as ManagedInstancePanel, a as ModuleExplorer, t as OperationsExplorer, r as OverviewDashboard, c as PeerMap, p as ProposalBrowser, d as ProvenanceViewer, f as ReferenceExplorer, e as SettingsPanel, h as StateExplorer, y as WorkflowVisualizer, i as dataCollectionLocation };

package/dist/studio/{components-B4eKIUN5.js → components-CJmzntBi.js}

@@ -1,6 +1,6 @@
 import { ServiceApiError as e, StudioServiceApi as t, safeDisplayValue as n, serviceApiErrorMessage as r } from "./utils/service-api.js";
 import { StudioProposalApi as i, proposalErrorMessage as a, proposalSections as o } from "./utils/proposal-api.js";
-import "./KeyManagementPanel-D5FMvvU9.js";
+import "./KeyManagementPanel-skUNnKRw.js";
 import "./components/ManagedInstancePanel.js";
 import s, { useCallback as c, useEffect as l, useMemo as u, useRef as d, useState as f } from "react";
 import { Link as p } from "react-router-dom";
@@ -227,7 +227,7 @@ function M({ model: e }) {
 		children: [/* @__PURE__ */ g("header", { children: [
 			/* @__PURE__ */ h("span", {
 				className: "eyebrow",
-				children: "Design"
+				children: "Build"
 			}),
 			/* @__PURE__ */ h("h1", { children: "Workflows" }),
 			/* @__PURE__ */ h("p", { children: "Durable state transitions declared by the application model." })
@@ -271,7 +271,7 @@ function N({ model: e }) {
 		children: [/* @__PURE__ */ g("header", { children: [
 			/* @__PURE__ */ h("span", {
 				className: "eyebrow",
-				children: "Design"
+				children: "Build"
 			}),
 			/* @__PURE__ */ h("h1", { children: "Agents" }),
 			/* @__PURE__ */ h("p", { children: "Autonomous participants whose authority and workflows are part of the model." })
@@ -308,7 +308,7 @@ function F({ db: e, remoteUrl: t = "", token: n = "", applicationUrl: r = "", fe
 		c(t), d(n);
 	}, [t, n]), /* @__PURE__ */ g("div", {
 		className: "settings-panel",
-		children: [/* @__PURE__ */ h("h2", { children: "Settings" }), /* @__PURE__ */ g("div", {
+		children: [/* @__PURE__ */ h("h1", { children: "Connection" }), /* @__PURE__ */ g("div", {
 			className: "settings-content",
 			children: [
 				/* @__PURE__ */ h("h3", { children: "Application" }),
@@ -649,7 +649,8 @@ function R({ db: e, namespace: t = "default", projectSpec: n, managedPublish: r,
 			namespace: V.namespace.trim() || t,
 			server: {
 				url: V.url.trim().replace(/\/$/, ""),
-				token: V.token
+				token: V.token,
+				operatorConsole: !0
 			}
 		});
 		try {
@@ -1990,7 +1991,7 @@ function ie({ model: e, section: t }) {
 		className: "studio-model-page",
 		children: [/* @__PURE__ */ g("header", { children: [/* @__PURE__ */ h("span", {
 			className: "eyebrow",
-			children: "Contract"
+			children: "Build"
 		}), /* @__PURE__ */ h("h1", { children: t === "schema" ? "Schema" : "Policies" })] }), t === "schema" ? e.collections.map((e) => /* @__PURE__ */ g("article", {
 			className: "studio-card",
 			children: [
@@ -2020,7 +2021,7 @@ function Y({ model: e }) {
 			/* @__PURE__ */ g("header", { children: [
 				/* @__PURE__ */ h("span", {
 					className: "eyebrow",
-					children: "Design"
+					children: "Build"
 				}),
 				/* @__PURE__ */ h("h1", { children: "Capabilities" }),
 				/* @__PURE__ */ g("p", { children: [

package/dist/studio/control-plane/Data.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Data.d.ts","sourceRoot":"","sources":["../../src/control-plane/Data.tsx"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAA4B,MAAM,OAAO,CAAC;AA+PjD,wBAAgB,WAAW,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAAE,KAAK,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,IAAI,CAAA;CAAE,qBAiSjI;AAED,eAAe,WAAW,CAAC"}
+{"version":3,"file":"Data.d.ts","sourceRoot":"","sources":["../../src/control-plane/Data.tsx"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAA4B,MAAM,OAAO,CAAC;AA+PjD,wBAAgB,WAAW,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAAE,KAAK,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,IAAI,CAAA;CAAE,qBAoSjI;AAED,eAAe,WAAW,CAAC"}

package/dist/studio/control-plane/Instance.d.ts

@@ -8,7 +8,10 @@ export declare function replicationAvailability(input: {
     healthError: string;
     hasHealth: boolean;
 }): ReplicationAvailability;
-export declare function ReplicationHealthUnavailable(): React.JSX.Element;
+/** `reason` is the instance's own explanation, shown whenever it gives one. */
+export declare function ReplicationHealthUnavailable({ reason }?: {
+    reason?: string;
+}): React.JSX.Element;
 export declare function Replication(): React.JSX.Element;
 export declare function Applications(): React.JSX.Element;
 export declare function Monitoring(): React.JSX.Element;

package/dist/studio/control-plane/Instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Instance.d.ts","sourceRoot":"","sources":["../../src/control-plane/Instance.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,mBAAmB,GAAG,aAAa,GAAG,gBAAgB,GAAG,WAAW,CAAC;AAEvH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;CACpB,GAAG,uBAAuB,CAO1B;AAED,wBAAgB,4BAA4B,sBAQ3C;AAED,wBAAgB,WAAW,sBAoF1B;AAED,wBAAgB,YAAY,sBA0C3B;AAED,wBAAgB,UAAU,sBAoCzB;AAED,wBAAgB,QAAQ,sBA0EvB;AAED,wBAAgB,SAAS,sBA8CxB"}
+{"version":3,"file":"Instance.d.ts","sourceRoot":"","sources":["../../src/control-plane/Instance.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,mBAAmB,GAAG,aAAa,GAAG,gBAAgB,GAAG,WAAW,CAAC;AAEvH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;CACpB,GAAG,uBAAuB,CAO1B;AAED,+EAA+E;AAC/E,wBAAgB,4BAA4B,CAAC,EAAE,MAAM,EAAE,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,qBAQhF;AAED,wBAAgB,WAAW,sBAoF1B;AAED,wBAAgB,YAAY,sBA0C3B;AAED,wBAAgB,UAAU,sBAoCzB;AAED,wBAAgB,QAAQ,sBA0EvB;AAED,wBAAgB,SAAS,sBA8CxB"}

package/dist/studio/control-plane/Operations.d.ts

@@ -1,7 +1,10 @@
 import { default as React } from 'react';
 export type OperationsAvailability = 'loading' | 'connection-failure' | 'unsupported' | 'supported';
 export declare function operationsAvailability(loading: boolean, error: string, capabilityStatus: string): OperationsAvailability;
-export declare function TransactionObservabilityUnavailable(): React.JSX.Element;
+/** `reason` is the instance's own explanation, shown whenever it gives one. */
+export declare function TransactionObservabilityUnavailable({ reason }?: {
+    reason?: string;
+}): React.JSX.Element;
 export declare function OperationsConsole({ onOpenRecord }: {
     onOpenRecord: (collection: string, id: string) => void;
 }): React.JSX.Element;