@fuzdev/fuz_app 0.60.0 → 0.61.0

package/dist/ui/audit_log_state.svelte.js

@@ -6,18 +6,24 @@
  * stream continues to use `EventSource` directly — streams aren't an RPC
  * concern.
  *
+ * Holds two `AsyncSlot`s — `list` (the main event stream) and
+ * `role_grant_history` (the dedicated role-grant history endpoint). Data
+ * lives on the class so SSE pushes and gap-fill calls update it directly.
+ *
  * @module
  */
 import { DEV } from 'esm-env';
 import { create_context } from '@fuzdev/fuz_ui/context_helpers.js';
-import { Loadable } from './loadable.svelte.js';
+import { AsyncSlot } from './async_slot.svelte.js';
 /**
  * Svelte context carrying the reactive `AuditLogRpc` accessor. Mirrors
  * `admin_accounts_rpc_context`. Unset context falls back to `() => null`.
  */
 export const audit_log_rpc_context = create_context(() => () => null);
-export class AuditLogState extends Loadable {
+export class AuditLogState {
     #get_rpc;
+    list = new AsyncSlot();
+    role_grant_history = new AsyncSlot();
     events = $state.raw([]);
     role_grant_history_events = $state.raw([]);
     count = $derived(this.events.length);
@@ -30,7 +36,6 @@ export class AuditLogState extends Loadable {
     /** Path to the SSE stream endpoint. */
     #stream_url;
     constructor(options) {
-        super();
         this.#get_rpc = options?.get_rpc ?? (() => null);
         this.#stream_url = options?.stream_url ?? '/api/admin/audit/stream';
     }
@@ -38,26 +43,22 @@ export class AuditLogState extends Loadable {
     get has_rpc() {
         return this.#get_rpc() !== null;
     }
-    async fetch(options) {
+    #require_rpc() {
         const rpc = this.#get_rpc();
-        if (!rpc) {
-            this.error = 'rpc adapter not wired';
-            return;
-        }
-        await this.run(async () => {
-            const { events } = await rpc.list(options);
+        if (!rpc)
+            throw new Error('rpc adapter not wired');
+        return rpc;
+    }
+    async fetch(options) {
+        await this.list.run(async () => {
+            const { events } = await this.#require_rpc().list(options);
             this.events = events;
-            this.#update_last_seq(this.events);
+            this.#update_last_seq(events);
         });
     }
     async fetch_role_grant_history(limit, offset) {
-        const rpc = this.#get_rpc();
-        if (!rpc) {
-            this.error = 'rpc adapter not wired';
-            return;
-        }
-        await this.run(async () => {
-            const { events } = await rpc.role_grant_history({ limit, offset });
+        await this.role_grant_history.run(async () => {
+            const { events } = await this.#require_rpc().role_grant_history({ limit, offset });
             this.role_grant_history_events = events;
         });
     }

package/dist/ui/keyed_async_slot.svelte.d.ts

@@ -0,0 +1,139 @@
+/**
+ * Keyed sibling of `AsyncSlot` — fans the per-instance supersession
+ * machinery out across an open set of keys.
+ *
+ * Each key gets its own lazily-created `AsyncSlot`, so concurrent
+ * `run(key_a, ...)` and `run(key_b, ...)` calls are independent: a
+ * second `run()` on `key_a` aborts only `key_a`'s in-flight call,
+ * leaving `key_b` running. The keyed shape replaces the
+ * `AsyncSlot` + `SvelteSet<id>` pair that state classes previously
+ * carried for per-row in-flight tracking, with two genuine wins:
+ *
+ * - **Cross-key supersession is correct** — clicking row B while row
+ *   A is in flight no longer aborts A; each row has its own
+ *   AbortController.
+ * - **Per-key error surfacing** — `error(key)` carries the failure
+ *   for that key only, instead of the last-error-wins shape of a
+ *   shared slot.
+ *
+ * The backing `SvelteMap` keeps entries even after a `run()` resolves
+ * — components can read `error(key)` to render an inline per-row
+ * failure indicator. Call `delete(key)` to dismiss an entry, or
+ * `reset()` to clear everything (e.g. on page leave).
+ *
+ * @example
+ * ```ts
+ * class AdminInvitesState {
+ *   readonly remove = new KeyedAsyncSlot<Uuid>();
+ *
+ *   async submit_delete(id: Uuid): Promise<void> {
+ *     const ok = await this.remove.run(id, () => this.#rpc().delete({invite_id: id}));
+ *     if (ok !== undefined) await this.fetch();
+ *   }
+ * }
+ *
+ * // In a template:
+ * //   <button disabled={state.remove.loading(row.id)}>
+ * //     {state.remove.loading(row.id) ? 'deleting…' : 'delete'}
+ * //   </button>
+ * //   {#if state.remove.error(row.id)}<p>{state.remove.error(row.id)}</p>{/if}
+ * ```
+ *
+ * @module
+ */
+import { AsyncSlot, type AsyncSlotOptions, type RunOptions } from './async_slot.svelte.js';
+/**
+ * Constructor options for `KeyedAsyncSlot`. Propagated to every child
+ * `AsyncSlot` at lazy creation time.
+ *
+ * `initial` from {@link AsyncSlotOptions} is deliberately omitted —
+ * keyed slots have no per-key seed concept (the entries don't exist
+ * until `run()` creates them).
+ */
+export type KeyedAsyncSlotOptions<T, E = string> = Omit<AsyncSlotOptions<T, E>, 'initial'>;
+/**
+ * Reactive container for many concurrent async operations keyed by `K`.
+ *
+ * @typeParam K - The key type. Map identity is SameValueZero — branded
+ *   strings (`Uuid`) work directly. For composite keys, stringify at
+ *   the call site (e.g. `` `${account_id}:${role}` ``).
+ * @typeParam T - The success payload type. Use `void` for write-only
+ *   actions whose response isn't worth retaining.
+ * @typeParam E - The shape of per-key `error(key)`. Defaults to
+ *   `string` (set by the default `map_error`).
+ */
+export declare class KeyedAsyncSlot<K, T = void, E = string> {
+    #private;
+    constructor(options?: KeyedAsyncSlotOptions<T, E>);
+    /** Total number of keys with state (pending OR resolved). Reactive. */
+    get size(): number;
+    /** Reactive — true once `run(key, ...)` has been called and the entry hasn't been deleted. */
+    has(key: K): boolean;
+    /**
+     * Direct access to the underlying `AsyncSlot` for `key`, or
+     * `undefined` if no `run()` has been issued for it yet. Reactive on
+     * map population and on the slot's `$state.raw` fields.
+     *
+     * Prefer the sugar getters ({@link loading}, {@link error}) for
+     * templates; reach for `get(key)` when you need `error_data`, `data`,
+     * or to call `abort()` / `set()` / `reset()` on the underlying slot.
+     */
+    get(key: K): AsyncSlot<T, E> | undefined;
+    /** Reactive — `false` for keys that have never been used. */
+    loading(key: K): boolean;
+    /** Reactive — `null` when the key has no entry or hasn't failed. */
+    error(key: K): E | null;
+    /** Reactive — `false` for keys that have never been used. */
+    failed(key: K): boolean;
+    /** Reactive — `false` for keys that have never been used. */
+    succeeded(key: K): boolean;
+    /** Reactive iterator over every key with state. */
+    keys(): IterableIterator<K>;
+    /** Reactive iterator over every slot. */
+    values(): IterableIterator<AsyncSlot<T, E>>;
+    /** Reactive iterator over `[key, slot]` pairs. */
+    entries(): IterableIterator<[K, AsyncSlot<T, E>]>;
+    /**
+     * Run an async operation for `key`. Lazily creates an `AsyncSlot`
+     * for the key on first use, inheriting the constructor's
+     * `map_error` / `preserve_error_on_retry` options.
+     *
+     * Supersession is scoped to `key`: a second `run(key, ...)` aborts
+     * the first's signal AND drops its commit. Calls on different keys
+     * are fully independent (each has its own `AbortController`).
+     *
+     * @returns the resolved value on success; `undefined` on failure,
+     *   abort, or supersession.
+     */
+    run(key: K, fn: (signal: AbortSignal) => Promise<T>, options?: RunOptions): Promise<T | undefined>;
+    /**
+     * Abort the in-flight run for `key`, if any. No-op when the key has
+     * no entry. The slot stays in the map at its prior resolved status —
+     * call {@link delete} to remove the entry entirely.
+     */
+    abort(key: K, reason?: unknown): void;
+    /**
+     * Abort every in-flight run. Resolved entries stay in the map —
+     * call {@link reset} to clear them too.
+     */
+    abort_all(reason?: unknown): void;
+    /**
+     * Abort the in-flight run for `key` (if any) and remove the entry
+     * from the map. After `delete(key)`, `has(key)` returns `false` and
+     * the sugar getters report the no-entry defaults — typically how a
+     * UI dismisses a per-row error indicator.
+     *
+     * @returns `true` if the key had an entry.
+     *
+     * @mutates `this`
+     */
+    delete(key: K): boolean;
+    /**
+     * Abort every in-flight run and clear the map. The keyed slot looks
+     * like a fresh instance afterwards.
+     *
+     * @mutates `this`
+     */
+    reset(): void;
+}
+//# sourceMappingURL=keyed_async_slot.svelte.d.ts.map

package/dist/ui/keyed_async_slot.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyed_async_slot.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/keyed_async_slot.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAIH,OAAO,EAAC,SAAS,EAAE,KAAK,gBAAgB,EAAE,KAAK,UAAU,EAAC,MAAM,wBAAwB,CAAC;AAEzF;;;;;;;GAOG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAE3F;;;;;;;;;;GAUG;AACH,qBAAa,cAAc,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,MAAM;;gBAItC,OAAO,GAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC,CAAM;IAIrD,uEAAuE;IACvE,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,8FAA8F;IAC9F,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,OAAO;IAIpB;;;;;;;;OAQG;IACH,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS;IAIxC,6DAA6D;IAC7D,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,OAAO;IAIxB,oEAAoE;IACpE,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI;IAIvB,6DAA6D;IAC7D,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,OAAO;IAIvB,6DAA6D;IAC7D,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,OAAO;IAI1B,mDAAmD;IACnD,IAAI,IAAI,gBAAgB,CAAC,CAAC,CAAC;IAI3B,yCAAyC;IACzC,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAI3C,kDAAkD;IAClD,OAAO,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAIjD;;;;;;;;;;;OAWG;IACG,GAAG,CACR,GAAG,EAAE,CAAC,EACN,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EACvC,OAAO,CAAC,EAAE,UAAU,GAClB,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IASzB;;;;OAIG;IACH,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI;IAIrC;;;OAGG;IACH,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI;IAMjC;;;;;;;;;OASG;IACH,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,OAAO;IAOvB;;;;;OAKG;IACH,KAAK,IAAI,IAAI;CAMb"}

package/dist/ui/keyed_async_slot.svelte.js

@@ -0,0 +1,177 @@
+/**
+ * Keyed sibling of `AsyncSlot` — fans the per-instance supersession
+ * machinery out across an open set of keys.
+ *
+ * Each key gets its own lazily-created `AsyncSlot`, so concurrent
+ * `run(key_a, ...)` and `run(key_b, ...)` calls are independent: a
+ * second `run()` on `key_a` aborts only `key_a`'s in-flight call,
+ * leaving `key_b` running. The keyed shape replaces the
+ * `AsyncSlot` + `SvelteSet<id>` pair that state classes previously
+ * carried for per-row in-flight tracking, with two genuine wins:
+ *
+ * - **Cross-key supersession is correct** — clicking row B while row
+ *   A is in flight no longer aborts A; each row has its own
+ *   AbortController.
+ * - **Per-key error surfacing** — `error(key)` carries the failure
+ *   for that key only, instead of the last-error-wins shape of a
+ *   shared slot.
+ *
+ * The backing `SvelteMap` keeps entries even after a `run()` resolves
+ * — components can read `error(key)` to render an inline per-row
+ * failure indicator. Call `delete(key)` to dismiss an entry, or
+ * `reset()` to clear everything (e.g. on page leave).
+ *
+ * @example
+ * ```ts
+ * class AdminInvitesState {
+ *   readonly remove = new KeyedAsyncSlot<Uuid>();
+ *
+ *   async submit_delete(id: Uuid): Promise<void> {
+ *     const ok = await this.remove.run(id, () => this.#rpc().delete({invite_id: id}));
+ *     if (ok !== undefined) await this.fetch();
+ *   }
+ * }
+ *
+ * // In a template:
+ * //   <button disabled={state.remove.loading(row.id)}>
+ * //     {state.remove.loading(row.id) ? 'deleting…' : 'delete'}
+ * //   </button>
+ * //   {#if state.remove.error(row.id)}<p>{state.remove.error(row.id)}</p>{/if}
+ * ```
+ *
+ * @module
+ */
+import { SvelteMap } from 'svelte/reactivity';
+import { AsyncSlot } from './async_slot.svelte.js';
+/**
+ * Reactive container for many concurrent async operations keyed by `K`.
+ *
+ * @typeParam K - The key type. Map identity is SameValueZero — branded
+ *   strings (`Uuid`) work directly. For composite keys, stringify at
+ *   the call site (e.g. `` `${account_id}:${role}` ``).
+ * @typeParam T - The success payload type. Use `void` for write-only
+ *   actions whose response isn't worth retaining.
+ * @typeParam E - The shape of per-key `error(key)`. Defaults to
+ *   `string` (set by the default `map_error`).
+ */
+export class KeyedAsyncSlot {
+    #slots = new SvelteMap();
+    #options;
+    constructor(options = {}) {
+        this.#options = options;
+    }
+    /** Total number of keys with state (pending OR resolved). Reactive. */
+    get size() {
+        return this.#slots.size;
+    }
+    /** Reactive — true once `run(key, ...)` has been called and the entry hasn't been deleted. */
+    has(key) {
+        return this.#slots.has(key);
+    }
+    /**
+     * Direct access to the underlying `AsyncSlot` for `key`, or
+     * `undefined` if no `run()` has been issued for it yet. Reactive on
+     * map population and on the slot's `$state.raw` fields.
+     *
+     * Prefer the sugar getters ({@link loading}, {@link error}) for
+     * templates; reach for `get(key)` when you need `error_data`, `data`,
+     * or to call `abort()` / `set()` / `reset()` on the underlying slot.
+     */
+    get(key) {
+        return this.#slots.get(key);
+    }
+    /** Reactive — `false` for keys that have never been used. */
+    loading(key) {
+        return this.#slots.get(key)?.loading ?? false;
+    }
+    /** Reactive — `null` when the key has no entry or hasn't failed. */
+    error(key) {
+        return this.#slots.get(key)?.error ?? null;
+    }
+    /** Reactive — `false` for keys that have never been used. */
+    failed(key) {
+        return this.#slots.get(key)?.failed ?? false;
+    }
+    /** Reactive — `false` for keys that have never been used. */
+    succeeded(key) {
+        return this.#slots.get(key)?.succeeded ?? false;
+    }
+    /** Reactive iterator over every key with state. */
+    keys() {
+        return this.#slots.keys();
+    }
+    /** Reactive iterator over every slot. */
+    values() {
+        return this.#slots.values();
+    }
+    /** Reactive iterator over `[key, slot]` pairs. */
+    entries() {
+        return this.#slots.entries();
+    }
+    /**
+     * Run an async operation for `key`. Lazily creates an `AsyncSlot`
+     * for the key on first use, inheriting the constructor's
+     * `map_error` / `preserve_error_on_retry` options.
+     *
+     * Supersession is scoped to `key`: a second `run(key, ...)` aborts
+     * the first's signal AND drops its commit. Calls on different keys
+     * are fully independent (each has its own `AbortController`).
+     *
+     * @returns the resolved value on success; `undefined` on failure,
+     *   abort, or supersession.
+     */
+    async run(key, fn, options) {
+        let slot = this.#slots.get(key);
+        if (!slot) {
+            slot = new AsyncSlot(this.#options);
+            this.#slots.set(key, slot);
+        }
+        return slot.run(fn, options);
+    }
+    /**
+     * Abort the in-flight run for `key`, if any. No-op when the key has
+     * no entry. The slot stays in the map at its prior resolved status —
+     * call {@link delete} to remove the entry entirely.
+     */
+    abort(key, reason) {
+        this.#slots.get(key)?.abort(reason);
+    }
+    /**
+     * Abort every in-flight run. Resolved entries stay in the map —
+     * call {@link reset} to clear them too.
+     */
+    abort_all(reason) {
+        for (const slot of this.#slots.values()) {
+            slot.abort(reason);
+        }
+    }
+    /**
+     * Abort the in-flight run for `key` (if any) and remove the entry
+     * from the map. After `delete(key)`, `has(key)` returns `false` and
+     * the sugar getters report the no-entry defaults — typically how a
+     * UI dismisses a per-row error indicator.
+     *
+     * @returns `true` if the key had an entry.
+     *
+     * @mutates `this`
+     */
+    delete(key) {
+        const slot = this.#slots.get(key);
+        if (!slot)
+            return false;
+        slot.abort();
+        return this.#slots.delete(key);
+    }
+    /**
+     * Abort every in-flight run and clear the map. The keyed slot looks
+     * like a fresh instance afterwards.
+     *
+     * @mutates `this`
+     */
+    reset() {
+        for (const slot of this.#slots.values()) {
+            slot.abort();
+        }
+        this.#slots.clear();
+    }
+}

package/dist/ui/role_grant_offers_state.svelte.d.ts

@@ -13,9 +13,18 @@
  * delivery is pull-only via `subscribe()` — the consumer plumbs their
  * `FrontendWebsocketClient` / `ActionPeer` receiver to `apply_notification`.
  *
+ * Holds six `AsyncSlot`s — one per RPC verb. The cache `#offers` lives on
+ * the class (multiple ops write into it via `#merge_offers` /
+ * `#remove_offer`); the `create` slot is typed `AsyncSlot<RoleGrantOfferJson>`
+ * so `submit_create` can return the new offer via the slot's
+ * supersession-safe `data` path, but the other slots' `data` is unused
+ * (no single op owns the cache). Method names use the `submit_*` prefix
+ * to avoid slot-name collisions; the `history` view stayed natural by
+ * naming the fetch slot `list_history`.
+ *
  * @module
  */
-import { Loadable } from './loadable.svelte.js';
+import { AsyncSlot } from './async_slot.svelte.js';
 import type { RoleGrantOfferJson } from '../auth/role_grant_offer_schema.js';
 /**
  * Svelte context for `RoleGrantOffersState`.
@@ -81,8 +90,31 @@ export interface RoleGrantOffersStateOptions {
      */
     actor_id: () => string | null;
 }
-export declare class RoleGrantOffersState extends Loadable {
+export declare class RoleGrantOffersState {
     #private;
+    readonly list: AsyncSlot<void, string>;
+    readonly list_history: AsyncSlot<void, string>;
+    readonly create: AsyncSlot<{
+        id: string & import("zod").$brand<"Uuid">;
+        from_actor_id: string & import("zod").$brand<"Uuid">;
+        to_account_id: string & import("zod").$brand<"Uuid">;
+        to_actor_id: (string & import("zod").$brand<"Uuid">) | null;
+        role: string;
+        scope_kind: string | null;
+        scope_id: (string & import("zod").$brand<"Uuid">) | null;
+        message: string | null;
+        created_at: string;
+        expires_at: string;
+        accepted_at: string | null;
+        declined_at: string | null;
+        decline_reason: string | null;
+        retracted_at: string | null;
+        superseded_at: string | null;
+        resulting_role_grant_id: (string & import("zod").$brand<"Uuid">) | null;
+    }, string>;
+    readonly accept: AsyncSlot<void, string>;
+    readonly decline: AsyncSlot<void, string>;
+    readonly retract: AsyncSlot<void, string>;
     /** Pending offers for the current account, soonest-expiring first. */
     readonly incoming: Array<RoleGrantOfferJson>;
     /** Pending offers from the current actor, newest-created first. */
@@ -105,7 +137,7 @@ export declare class RoleGrantOffersState extends Loadable {
      * `to_account_id`; omit / null for the account-grain default (any actor
      * on the recipient account may accept).
      */
-    create(params: {
+    submit_create(params: {
         to_account_id: string;
         to_actor_id?: string | null;
         role: string;
@@ -113,9 +145,9 @@ export declare class RoleGrantOffersState extends Loadable {
         message?: string | null;
     }): Promise<RoleGrantOfferJson | undefined>;
     /** Accept an offer; stamps it terminal in the cache and drops any siblings the server superseded. */
-    accept(offer_id: string): Promise<void>;
-    decline(offer_id: string, reason?: string | null): Promise<void>;
-    retract(offer_id: string): Promise<void>;
+    submit_accept(offer_id: string): Promise<void>;
+    submit_decline(offer_id: string, reason?: string | null): Promise<void>;
+    submit_retract(offer_id: string): Promise<void>;
     /**
      * Wire a notification subscription. The handler dispatches each matching
      * notification into `apply_notification`; the returned disposer unwires.
@@ -129,7 +161,7 @@ export declare class RoleGrantOffersState extends Loadable {
      * @mutates `this`
      */
     apply_notification(notification: RoleGrantOfferNotification): void;
-    /** Clear the cache and reset loading/error state. */
+    /** Clear the cache and reset every slot. */
     reset(): void;
 }
 //# sourceMappingURL=role_grant_offers_state.svelte.d.ts.map

package/dist/ui/role_grant_offers_state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role_grant_offers_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/role_grant_offers_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EAAC,QAAQ,EAAC,MAAM,sBAAsB,CAAC;AAC9C,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,oCAAoC,CAAC;AAU3E;;;;GAIG;AACH,eAAO,MAAM,+BAA+B;;;;CAAyC,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,OAAO,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;KAAC,CAAC,CAAC;IACzD,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;KAAC,CAAC,CAAC;IACnD,MAAM,EAAE,CAAC,MAAM,EAAE;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,KAAK,OAAO,CAAC;QAAC,KAAK,EAAE,kBAAkB,CAAA;KAAC,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,kBAAkB,CAAC;QAC1B,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;KACpC,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC,CAAC;IAC3E,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC,CAAC;CACnD;AAED,yFAAyF;AACzF,MAAM,WAAW,0BAA0B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CAChB;AAED,qFAAqF;AACrF,MAAM,MAAM,uBAAuB,GAAG,CACrC,OAAO,EAAE,CAAC,YAAY,EAAE,0BAA0B,KAAK,IAAI,KACvD,MAAM,IAAI,CAAC;AAEhB,MAAM,WAAW,2BAA2B;IAC3C,GAAG,EAAE,kBAAkB,CAAC;IACxB,oFAAoF;IACpF,UAAU,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAChC;;;OAGG;IACH,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CAC9B;AAQD,qBAAa,oBAAqB,SAAQ,QAAQ;;IAOjD,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAazC;IAEH,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAazC;IAEH,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAIxC;IAEH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAkC;gBAErD,OAAO,EAAE,2BAA2B;IAOhD,4DAA4D;IACtD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,6DAA6D;IACvD,aAAa,CAAC,OAAO,CAAC,EAAE;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAO/E;;;;;;OAMG;IACG,MAAM,CAAC,MAAM,EAAE;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAQ3C,qGAAqG;IAC/F,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAavC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAOhE,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9C;;;OAGG;IACH,SAAS,CAAC,YAAY,EAAE,uBAAuB,GAAG,MAAM,IAAI;IAM5D;;;;;;OAMG;IACH,kBAAkB,CAAC,YAAY,EAAE,0BAA0B,GAAG,IAAI;IAwBlE,qDAAqD;IAC5C,KAAK,IAAI,IAAI;CAmBtB"}
+{"version":3,"file":"role_grant_offers_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/role_grant_offers_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,oCAAoC,CAAC;AAU3E;;;;GAIG;AACH,eAAO,MAAM,+BAA+B;;;;CAAyC,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,OAAO,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;KAAC,CAAC,CAAC;IACzD,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;KAAC,CAAC,CAAC;IACnD,MAAM,EAAE,CAAC,MAAM,EAAE;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,KAAK,OAAO,CAAC;QAAC,KAAK,EAAE,kBAAkB,CAAA;KAAC,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,kBAAkB,CAAC;QAC1B,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;KACpC,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC,CAAC;IAC3E,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC,CAAC;CACnD;AAED,yFAAyF;AACzF,MAAM,WAAW,0BAA0B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CAChB;AAED,qFAAqF;AACrF,MAAM,MAAM,uBAAuB,GAAG,CACrC,OAAO,EAAE,CAAC,YAAY,EAAE,0BAA0B,KAAK,IAAI,KACvD,MAAM,IAAI,CAAC;AAEhB,MAAM,WAAW,2BAA2B;IAC3C,GAAG,EAAE,kBAAkB,CAAC;IACxB,oFAAoF;IACpF,UAAU,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAChC;;;OAGG;IACH,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CAC9B;AAQD,qBAAa,oBAAoB;;IAKhC,QAAQ,CAAC,IAAI,0BAAyB;IACtC,QAAQ,CAAC,YAAY,0BAAyB;IAC9C,QAAQ,CAAC,MAAM;;;;;;;;;;;;;;;;;eAAuC;IACtD,QAAQ,CAAC,MAAM,0BAAyB;IACxC,QAAQ,CAAC,OAAO,0BAAyB;IACzC,QAAQ,CAAC,OAAO,0BAAyB;IAIzC,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAazC;IAEH,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAazC;IAEH,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAIxC;IAEH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAkC;gBAErD,OAAO,EAAE,2BAA2B;IAMhD,4DAA4D;IACtD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,6DAA6D;IACvD,aAAa,CAAC,OAAO,CAAC,EAAE;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAO/E;;;;;;OAMG;IACG,aAAa,CAAC,MAAM,EAAE;QAC3B,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAQ3C,qGAAqG;IAC/F,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa9C,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvE,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOrD;;;OAGG;IACH,SAAS,CAAC,YAAY,EAAE,uBAAuB,GAAG,MAAM,IAAI;IAM5D;;;;;;OAMG;IACH,kBAAkB,CAAC,YAAY,EAAE,0BAA0B,GAAG,IAAI;IAwBlE,4CAA4C;IAC5C,KAAK,IAAI,IAAI;CAwBb"}

package/dist/ui/role_grant_offers_state.svelte.js

@@ -13,10 +13,19 @@
  * delivery is pull-only via `subscribe()` — the consumer plumbs their
  * `FrontendWebsocketClient` / `ActionPeer` receiver to `apply_notification`.
  *
+ * Holds six `AsyncSlot`s — one per RPC verb. The cache `#offers` lives on
+ * the class (multiple ops write into it via `#merge_offers` /
+ * `#remove_offer`); the `create` slot is typed `AsyncSlot<RoleGrantOfferJson>`
+ * so `submit_create` can return the new offer via the slot's
+ * supersession-safe `data` path, but the other slots' `data` is unused
+ * (no single op owns the cache). Method names use the `submit_*` prefix
+ * to avoid slot-name collisions; the `history` view stayed natural by
+ * naming the fetch slot `list_history`.
+ *
  * @module
  */
 import { create_context } from '@fuzdev/fuz_ui/context_helpers.js';
-import { Loadable } from './loadable.svelte.js';
+import { AsyncSlot } from './async_slot.svelte.js';
 import { ROLE_GRANT_OFFER_ACCEPTED_NOTIFICATION_METHOD, ROLE_GRANT_OFFER_DECLINED_NOTIFICATION_METHOD, ROLE_GRANT_OFFER_RECEIVED_NOTIFICATION_METHOD, ROLE_GRANT_OFFER_RETRACTED_NOTIFICATION_METHOD, ROLE_GRANT_OFFER_SUPERSEDE_NOTIFICATION_METHOD, ROLE_GRANT_REVOKE_NOTIFICATION_METHOD, } from '../auth/role_grant_offer_notifications.js';
 /**
  * Svelte context for `RoleGrantOffersState`.
@@ -28,10 +37,16 @@ const is_terminal = (o) => o.accepted_at !== null ||
     o.declined_at !== null ||
     o.retracted_at !== null ||
     o.superseded_at !== null;
-export class RoleGrantOffersState extends Loadable {
+export class RoleGrantOffersState {
     #rpc;
     #get_account_id;
     #get_actor_id;
+    list = new AsyncSlot();
+    list_history = new AsyncSlot();
+    create = new AsyncSlot();
+    accept = new AsyncSlot();
+    decline = new AsyncSlot();
+    retract = new AsyncSlot();
     #offers = $state.raw(new Map());
     /** Pending offers for the current account, soonest-expiring first. */
     incoming = $derived.by(() => {
@@ -79,21 +94,20 @@ export class RoleGrantOffersState extends Loadable {
     });
     incoming_count = $derived(this.incoming.length);
     constructor(options) {
-        super();
         this.#rpc = options.rpc;
         this.#get_account_id = options.account_id;
         this.#get_actor_id = options.actor_id;
     }
     /** Seed the cache with the recipient-side pending inbox. */
     async fetch() {
-        await this.run(async () => {
+        await this.list.run(async () => {
             const { offers } = await this.#rpc.list();
             this.#merge_offers(offers);
         });
     }
     /** Seed both-directions history (includes terminal rows). */
     async fetch_history(options) {
-        await this.run(async () => {
+        await this.list_history.run(async () => {
             const { offers } = await this.#rpc.history(options);
             this.#merge_offers(offers);
         });
@@ -105,16 +119,16 @@ export class RoleGrantOffersState extends Loadable {
      * `to_account_id`; omit / null for the account-grain default (any actor
      * on the recipient account may accept).
      */
-    async create(params) {
-        return this.run(async () => {
+    async submit_create(params) {
+        return this.create.run(async () => {
             const { offer } = await this.#rpc.create(params);
             this.#merge_offers([offer]);
             return offer;
         });
     }
     /** Accept an offer; stamps it terminal in the cache and drops any siblings the server superseded. */
-    async accept(offer_id) {
-        await this.run(async () => {
+    async submit_accept(offer_id) {
+        await this.accept.run(async () => {
             const result = await this.#rpc.accept(offer_id);
             this.#merge_offers([result.offer]);
             // siblings are authoritatively superseded server-side; the
@@ -125,14 +139,14 @@ export class RoleGrantOffersState extends Loadable {
             }
         });
     }
-    async decline(offer_id, reason) {
-        await this.run(async () => {
+    async submit_decline(offer_id, reason) {
+        await this.decline.run(async () => {
             await this.#rpc.decline(offer_id, reason);
             this.#remove_offer(offer_id);
         });
     }
-    async retract(offer_id) {
-        await this.run(async () => {
+    async submit_retract(offer_id) {
+        await this.retract.run(async () => {
             await this.#rpc.retract(offer_id);
             this.#remove_offer(offer_id);
         });
@@ -178,9 +192,14 @@ export class RoleGrantOffersState extends Loadable {
                 return;
         }
     }
-    /** Clear the cache and reset loading/error state. */
+    /** Clear the cache and reset every slot. */
     reset() {
-        super.reset();
+        this.list.reset();
+        this.list_history.reset();
+        this.create.reset();
+        this.accept.reset();
+        this.decline.reset();
+        this.retract.reset();
         this.#offers = new Map();
     }
     #merge_offers(offers) {

package/dist/ui/table_state.svelte.d.ts

@@ -1,8 +1,10 @@
 /**
  * Reactive state for database table pagination and data fetching.
  *
- * Extends `Loadable` to manage paginated table data with column metadata,
- * row deletion, and derived pagination controls.
+ * Holds one `AsyncSlot` — `list` (the paginated row fetch). Per-row delete
+ * uses plain try/catch + scalar `deleting` / `delete_error` fields (no slot
+ * — `delete_error` must persist past `list.run()` retries so the failure
+ * message stays visible while the user refetches).
  *
  * @example
  * ```ts
@@ -26,10 +28,10 @@
  * 	table.fetch('accounts');
  * </script>
  *
- * {#if table.loading}
+ * {#if table.list.loading}
  * 	<p>loading…</p>
- * {:else if table.error}
- * 	<p>{table.error}</p>
+ * {:else if table.list.error}
+ * 	<p>{table.list.error}</p>
  * {:else}
  * 	<p>showing {table.showing_start}–{table.showing_end} of {table.total}</p>
  * {/if}
@@ -37,11 +39,12 @@
  *
  * @module
  */
-import { Loadable } from './loadable.svelte.js';
+import { AsyncSlot } from './async_slot.svelte.js';
 import type { ColumnInfo } from '../http/db_routes.js';
 /** Maximum number of rows that can be fetched in a single page. */
 export declare const TABLE_LIMIT_MAX = 1000;
-export declare class TableState extends Loadable {
+export declare class TableState {
+    readonly list: AsyncSlot<void, string>;
     table_name: string;
     columns: Array<ColumnInfo>;
     rows: Array<Record<string, unknown>>;

package/dist/ui/table_state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"table_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/table_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAC,QAAQ,EAAC,MAAM,sBAAsB,CAAC;AAG9C,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,sBAAsB,CAAC;AAErD,mEAAmE;AACnE,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,qBAAa,UAAW,SAAQ,QAAQ;IACvC,UAAU,EAAE,MAAM,CAAkB;IACpC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAkB;IAC5C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAkB;IACtD,KAAK,SAAiB;IACtB,MAAM,SAAiB;IACvB,KAAK,SAAmB;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAoB;IAC9C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAoB;IAC3C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAoB;IAG/C,QAAQ,CAAC,aAAa,SAAoD;IAC1E,QAAQ,CAAC,WAAW,SAAkE;IACtF,QAAQ,CAAC,QAAQ,UAA6B;IAC9C,QAAQ,CAAC,QAAQ,UAAmD;IAEpE;;;;;OAKG;IACG,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,SAAI,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBvE,OAAO,IAAI,IAAI;IAIf,OAAO,IAAI,IAAI;IAIf;;;;;;;OAOG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;CAoChE"}
+{"version":3,"file":"table_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/table_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AAGjD,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,sBAAsB,CAAC;AAErD,mEAAmE;AACnE,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,qBAAa,UAAU;IACtB,QAAQ,CAAC,IAAI,0BAAyB;IAEtC,UAAU,EAAE,MAAM,CAAkB;IACpC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAkB;IAC5C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAkB;IACtD,KAAK,SAAiB;IACtB,MAAM,SAAiB;IACvB,KAAK,SAAmB;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAoB;IAC9C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAoB;IAC3C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAoB;IAG/C,QAAQ,CAAC,aAAa,SAAoD;IAC1E,QAAQ,CAAC,WAAW,SAAkE;IACtF,QAAQ,CAAC,QAAQ,UAA6B;IAC9C,QAAQ,CAAC,QAAQ,UAAmD;IAEpE;;;;;OAKG;IACG,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,SAAI,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBvE,OAAO,IAAI,IAAI;IAIf,OAAO,IAAI,IAAI;IAIf;;;;;;;OAOG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;CAoChE"}