@k2b/cloud 0.43.0 → 0.45.0

package/src/ssr/platform-messages.ts

@@ -42,6 +42,10 @@ export const platformMessages = i18n.define({
       announcements: "Announcements",
       appCredentials: "App credentials",
       ai: "AI",
+      observability: "Observability",
+      baseSettings: "Base settings",
+      signinSecurity: "Sign-in & security",
+      cloudAreas: "Cloud",
       settings: "Settings",
       appAdmin: "App administration",
       userManagement: "Accounts & sign-in",
@@ -49,6 +53,7 @@ export const platformMessages = i18n.define({
       accountRegistration: "Registration & requests",
       accountOperations: "Operations",
       linuxAccess: "Linux identities",
+      storage: "Storage",
       pdfRendering: "PDF rendering",
       placesAndMaps: "Places and maps",
       emailTemplates: "Email templates",
@@ -142,8 +147,12 @@ export const platformMessages = i18n.define({
       general: "Allgemein",
       rail: "App-Leiste",
       announcements: "Ankündigungen",
-      appCredentials: "App-Zugänge",
+      appCredentials: "App-Schlüssel",
       ai: "KI",
+      observability: "Observability",
+      baseSettings: "Grundeinstellungen",
+      signinSecurity: "Anmeldung & Sicherheit",
+      cloudAreas: "Cloud",
       settings: "Einstellungen",
       appAdmin: "App-Administration",
       userManagement: "Accounts & Anmeldung",
@@ -151,6 +160,7 @@ export const platformMessages = i18n.define({
       accountRegistration: "Registrierung & Anfragen",
       accountOperations: "Betrieb",
       linuxAccess: "Linux-Identitäten",
+      storage: "Speicher",
       pdfRendering: "PDF-Erstellung",
       placesAndMaps: "Orte und Karten",
       emailTemplates: "E-Mail-Vorlagen",

package/src/ssr/profile-actions.ts

@@ -5,7 +5,7 @@ import type { CloudThemePreference } from "../shared/theme";
 import { createPreferenceController } from "./preference-controller";
 
 /** `appHref` is set while the installation offers the mobile app; the item then leads to `/me/app`. */
-export function createProfileActions(initialTheme: CloudThemePreference, appHref?: string) {
+export function createProfileActions(initialTheme: CloudThemePreference, appHref?: string, userId?: string) {
   const locale = useLocale();
   const preferences = createPreferenceController(initialTheme, locale);
   const [signingOut, setSigningOut] = createSignal(false);
@@ -13,16 +13,13 @@ export function createProfileActions(initialTheme: CloudThemePreference, appHref
     if (signingOut()) return;
     setSigningOut(true);
     // The API client and the push client load with the first sign-out, not with every page.
-    const loaded = await importOnDemand(() => Promise.all([import("../browser/notifications"), import("../clients/core")]));
+    const loaded = await importOnDemand(() => import("../browser/session"));
     if (!loaded) {
       setSigningOut(false);
       return;
     }
-    const [{ browserNotificationClient }, { apiClient }] = loaded;
     try {
-      await browserNotificationClient.disable().catch(() => undefined);
-      const response = await apiClient.auth.logout.$post();
-      if (!response.ok) throw new Error(preferences.messages().signOutFailed);
+      await loaded.signOutBrowserSession(userId, preferences.messages().signOutFailed);
       window.location.href = "/auth/login";
     } catch {
       toast.error(preferences.messages().signOutFailed);

package/src/ssr/pwa-messages.ts

@@ -13,7 +13,7 @@ export const pwaMessages = i18n.define({
       newVersion: ({ cloud }: { cloud: string }) => `New version of ${cloud}`,
       reload: "Reload",
       otherAccount: ({ cloud, name }: { cloud: string; name: string }) =>
-        `Chrome on this phone is signed in to ${cloud} as ${name}. Changes in the app may be saved to that account. Sign out of ${cloud} in Chrome.`,
+        `Chrome on this device is signed in to ${cloud} as ${name}. Changes in the app may be saved to that account. Sign out of ${cloud} in Chrome.`,
       errorAction: "Back to Start",
     },
     de: {
@@ -25,7 +25,7 @@ export const pwaMessages = i18n.define({
       newVersion: ({ cloud }: { cloud: string }) => `Neue Version von ${cloud}`,
       reload: "Neu laden",
       otherAccount: ({ cloud, name }: { cloud: string; name: string }) =>
-        `Chrome auf diesem Telefon ist bei ${cloud} als ${name} angemeldet. Änderungen in der App werden womöglich in diesem Konto gespeichert. Melde dich in Chrome von ${cloud} ab.`,
+        `Chrome auf diesem Gerät ist bei ${cloud} als ${name} angemeldet. Änderungen in der App werden womöglich in diesem Konto gespeichert. Melde dich in Chrome von ${cloud} ab.`,
       errorAction: "Zurück zum Start",
     },
   },

package/src/ssr/rail-navigation.ts

@@ -79,6 +79,9 @@ export const phoneBarLinks = (navigation: { shortcuts: RailLink[]; apps: RailLin
   return [...links.slice(0, limit - 1), links[current]!];
 };
 
+/** A phone bar item, and where its app's count comes from, like the rail icon's. */
+export type PhoneBarItem = TabBarItem & { counted?: { endpoint?: string; appId?: string } };
+
 /** Start and four apps fill the phone bar's five places. */
 const PHONE_BAR_APPS = 4;
 
@@ -93,7 +96,7 @@ export const phoneBarItems = (
   navigation: { shortcuts: RailLink[]; apps: RailLink[] },
   currentPath: string,
   home: { label: string; path: string },
-): TabBarItem[] => {
+): PhoneBarItem[] => {
   const links = phoneBarLinks(navigation, currentPath, PHONE_BAR_APPS);
   const items = links.map((link) => ({
     id: link.id,
@@ -101,6 +104,7 @@ export const phoneBarItems = (
     icon: link.iconClass,
     href: link.href,
     current: railLinkActive(link, currentPath),
+    ...(link.badge || link.appId ? { counted: { endpoint: link.badge, appId: link.appId } } : {}),
   }));
   const pathname = new URL(currentPath, "https://cloud.invalid").pathname;
   const start = new URL(home.path, "https://cloud.invalid").pathname;

package/src/ssr/settings-draft.ts

@@ -0,0 +1,153 @@
+import type { SaveStatusState } from "@k2b/ui";
+import { createEffect, createMemo, createSignal, onCleanup } from "solid-js";
+
+/**
+ * A settings form saves with the button in its level head, outside the form island. Both islands read this store: the
+ * form registers its state and actions, `SettingsSaveStatus` renders them. One form per page registers at a time.
+ */
+export type SettingsSaveControls = {
+  state: SaveStatusState;
+  savedAt?: string;
+  invalidCount?: number;
+  save: () => void;
+  discard: () => void;
+};
+
+const [controls, setControls] = createSignal<SettingsSaveControls | null>(null);
+export const settingsSaveControls = controls;
+
+/** A save that did not succeed: refused with a reason, or with an unclear outcome. */
+export type SettingsDraftOutcome = { kind: "failed" | "unknown"; message: string };
+
+/** Thrown by `save` when the server refused the write; anything else counts as an unclear outcome. */
+export class SaveRejected extends Error {}
+
+/**
+ * The error for a non-OK save response. A 4xx refused the write. A 5xx can come after the value was stored (for
+ * example when a follow-up step failed), so its outcome stays unclear and the person checks the current state.
+ */
+export const saveFailure = (status: number, message: string): Error =>
+  status >= 400 && status < 500 ? new SaveRejected(message) : new Error(message);
+
+/**
+ * For endpoints that write in one step and answer afterwards: an error body with a message comes from the handler,
+ * which did not store the value, so the save is refused and can be tried again. A response without one (a proxy
+ * page, a crash) leaves the outcome unclear.
+ */
+export const oneStepFailure = (status: number, body: { message?: string } | null, fallback: string): Error =>
+  body?.message ? new SaveRejected(body.message) : saveFailure(status, fallback);
+
+type Options<T> = {
+  initial: T;
+  /** Field errors of a draft; Save stays disabled while there are any. */
+  validate?: (value: T) => Record<string, string>;
+  /** True when saving is needed although the values did not change, such as a confirmed replacement. */
+  pending?: () => boolean;
+  /**
+   * Writes the draft and returns what is stored now. A save that writes several values one after another reports
+   * each stored step with `commit`, so a later failure keeps what already reached the server as the saved state.
+   */
+  save: (value: T, commit: (stored: T) => void) => Promise<T>;
+  locale: () => string;
+  /** Runs with Discard, for state the form keeps beside the draft, such as staged resets. */
+  onDiscard?: () => void;
+};
+
+/**
+ * A settings form that saves with a button: the draft, its field errors and the outcome of the last save. It registers
+ * with the level head, which shows the status with Discard and Save. A failed save keeps the draft; when the
+ * connection breaks, the outcome stays unclear and the person checks the current state instead of saving twice.
+ */
+export const createSettingsDraft = <T>(options: Options<T>) => {
+  const [stored, setStored] = createSignal<T>(options.initial);
+  const [draft, setDraft] = createSignal<T>(options.initial);
+  const [saving, setSaving] = createSignal(false);
+  const [outcome, setOutcome] = createSignal<SettingsDraftOutcome | null>(null);
+  const [savedAt, setSavedAt] = createSignal<string | undefined>(undefined);
+  const errors = createMemo(() => options.validate?.(draft()) ?? {});
+  const dirty = createMemo(() => JSON.stringify(draft()) !== JSON.stringify(stored()) || options.pending?.() === true);
+  const state = createMemo<SaveStatusState>(() => {
+    if (saving()) return "saving";
+    if (outcome()?.kind === "unknown") return "unknown";
+    if (Object.keys(errors()).length > 0) return "invalid";
+    if (outcome()?.kind === "failed") return "failed";
+    return dirty() ? "draft" : "saved";
+  });
+
+  const save = async () => {
+    if (saving() || !dirty() || Object.keys(errors()).length > 0 || outcome()?.kind === "unknown") return;
+    setSaving(true);
+    setOutcome(null);
+    const submitted = draft();
+    // Edits made while the request runs stay; only an untouched draft takes the stored values.
+    const settle = (next: T) => {
+      setStored(() => next);
+      if (draft() === submitted) setDraft(() => next);
+    };
+    try {
+      // A step only moves the saved state; the draft keeps the values still on their way.
+      settle(await options.save(submitted, (step) => setStored(() => step)));
+      setSavedAt(new Intl.DateTimeFormat(options.locale(), { hour: "2-digit", minute: "2-digit" }).format(new Date()));
+    } catch (error) {
+      setOutcome({
+        kind: error instanceof SaveRejected ? "failed" : "unknown",
+        message: error instanceof Error ? error.message : String(error),
+      });
+    } finally {
+      setSaving(false);
+    }
+  };
+  const discard = () => {
+    setDraft(() => stored());
+    setOutcome((current) => (current?.kind === "unknown" ? current : null));
+    options.onDiscard?.();
+  };
+  /**
+   * Takes newer stored values without losing edits: a field still at its old saved value moves to the new one, an
+   * edited field keeps the person's value. `adopt` names fields that take the new value regardless.
+   */
+  const rebase = (next: T, adopt: readonly string[] = []) => {
+    const previous = stored() as Record<string, unknown>;
+    const current = draft() as Record<string, unknown>;
+    const merged: Record<string, unknown> = { ...current };
+    for (const [key, value] of Object.entries(next as Record<string, unknown>)) {
+      if (adopt.includes(key) || JSON.stringify(current[key]) === JSON.stringify(previous[key])) merged[key] = value;
+    }
+    setStored(() => next);
+    setDraft(() => merged as T);
+  };
+
+  // Leaving the page with unsaved changes asks first, as the settings pages did before.
+  if (typeof window !== "undefined") {
+    const guard = (event: BeforeUnloadEvent) => {
+      if (state() === "saved") return;
+      event.preventDefault();
+    };
+    window.addEventListener("beforeunload", guard);
+    onCleanup(() => window.removeEventListener("beforeunload", guard));
+  }
+
+  createEffect(() =>
+    setControls({
+      state: state(),
+      savedAt: savedAt(),
+      invalidCount: Object.keys(errors()).length,
+      save: () => void save(),
+      discard,
+    }),
+  );
+  onCleanup(() => setControls(null));
+
+  return {
+    draft,
+    update: (change: Partial<T>) => setDraft((current) => ({ ...current, ...change })),
+    errors,
+    outcome,
+    saving,
+    save,
+    discard,
+    rebase,
+    /** The values last read from the server. */
+    stored,
+  };
+};

package/src/ssr/shell-data.tsx

@@ -9,6 +9,8 @@ import type { PanelProvider } from "./app-navigation";
 import type { RailApp } from "./rail-navigation";
 
 export type ShellData = {
+  /** Canonical public Cloud origin; omitted until app.url is configured. */
+  cloudOrigin?: string;
   panel?: { providers: PanelProvider[]; provider?: string; context: PanelPageContext | null; consent?: PanelConsentSnapshot };
   /** The authorized navigation catalog, sorted for the request locale: the rail, the app grid and the phone menu show it. */
   apps: RailApp[];
@@ -18,7 +20,7 @@ export type ShellData = {
   home?: string;
   legalLinks: AppLaunchpadLegalLink[];
   /** Signed-in pages: the person, for the profile menu and the phone menu's profile actions. */
-  profile?: { name: string; avatarSrc?: string; appHref?: string };
+  profile?: { userId?: string; name: string; avatarSrc?: string; appHref?: string };
   theme: CloudThemePreference;
   /** The current app's accent, for the Help dialog and the phone menu, which open outside the app canvas. */
   accent?: string;

package/src/styles/global.css

@@ -32,6 +32,7 @@
 @import "./input.css";
 @import "./resource-search.css";
 @import "./file-chooser.css";
+@import "./profile-picture.css";
 @import "./panel.css";
 
 @theme {

package/src/styles/profile-picture.css

@@ -0,0 +1,270 @@
+/* "Change profile picture" (@k2b/cloud/account/ui). It opens in the workspace
+   frame, which takes the whole screen on phones. On wider screens it keeps one
+   fixed size, so switching between photo, avatar, and initials or between parts
+   never resizes or moves the frame. Unlayered, like the shared frame rules. */
+@media (min-width: 48rem) {
+  .k2b-ui .k2b-dialog.k2b-panel-dialog-frame.cloud-profile-picture-dialog {
+    width: min(var(--k2b-dialog-available-width), 67.5rem);
+    height: min(43.75rem, 92dvh, var(--k2b-dialog-available-height));
+  }
+}
+
+.cloud-profile-picture {
+  display: flex;
+  min-height: 100%;
+  flex-direction: column;
+  gap: 0.875rem;
+}
+
+.cloud-profile-picture__body {
+  min-height: 0;
+  flex: 1;
+}
+
+.cloud-profile-picture__builder {
+  display: grid;
+  grid-template-columns: 20.625rem minmax(0, 1fr);
+  align-items: start;
+  gap: 1.5rem;
+}
+
+.cloud-profile-picture__preview {
+  position: sticky;
+  top: 0;
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 1rem;
+  padding-top: 0.25rem;
+}
+
+.cloud-profile-picture__stack {
+  display: contents;
+}
+
+.cloud-profile-picture__big {
+  display: inline-block;
+  width: 10rem;
+  height: 10rem;
+}
+
+.cloud-profile-picture__drawing,
+.cloud-profile-picture__photo {
+  display: inline-block;
+  flex: none;
+  overflow: hidden;
+  border-radius: 9999px;
+  line-height: 0;
+  object-fit: cover;
+}
+
+.cloud-profile-picture__drawing[data-shape="square"],
+.cloud-profile-picture__photo[data-shape="square"] {
+  border-radius: 28%;
+}
+
+.cloud-profile-picture__drawing > svg {
+  display: block;
+  width: 100%;
+  height: 100%;
+}
+
+.cloud-profile-picture__empty {
+  display: inline-grid;
+  width: 2.25rem;
+  height: 2.25rem;
+  place-items: center;
+  border-radius: 9999px;
+  color: var(--k2b-text-muted);
+  background: var(--k2b-surface-muted);
+}
+
+.cloud-profile-picture__empty[data-shape="square"] {
+  border-radius: 28%;
+}
+
+.cloud-profile-picture__sizes {
+  display: flex;
+  align-items: flex-end;
+  justify-content: center;
+  gap: 0.75rem;
+}
+
+.cloud-profile-picture__sizes figure {
+  display: flex;
+  margin: 0;
+  flex-direction: column;
+  align-items: center;
+  gap: 0.375rem;
+}
+
+.cloud-profile-picture__sizes figcaption {
+  color: var(--k2b-text-muted);
+  font-size: 0.65625rem;
+  font-variant-numeric: tabular-nums;
+}
+
+/* The dark-theme preview carries the dark tokens of its own `data-theme`. */
+.cloud-profile-picture__sizes--dark {
+  padding: 0.625rem 0.875rem;
+  border-radius: 0.75rem;
+  background: var(--k2b-surface);
+}
+
+.cloud-profile-picture__tools {
+  display: flex;
+  justify-content: center;
+  gap: 0.125rem;
+}
+
+.cloud-profile-picture__panel {
+  display: flex;
+  min-height: 22rem;
+  flex-direction: column;
+  gap: 1.25rem;
+  padding-top: 0.75rem;
+}
+
+.cloud-profile-picture__pane {
+  display: flex;
+  min-height: 26rem;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  gap: 0.875rem;
+  text-align: center;
+}
+
+.cloud-profile-picture__pane > p {
+  max-width: 26rem;
+  margin: 0;
+  color: var(--k2b-text-secondary);
+  font-size: 0.875rem;
+}
+
+.cloud-profile-picture__pane > .k2b-field {
+  width: min(32.5rem, 100%);
+}
+
+.cloud-profile-picture__cropper {
+  width: min(28rem, 100%);
+}
+
+.cloud-profile-picture__row {
+  display: flex;
+  flex-wrap: wrap;
+  justify-content: center;
+  gap: 0.5rem;
+}
+
+.cloud-profile-picture__placeholder {
+  width: 10rem;
+  height: 10rem;
+  border-radius: 9999px;
+  background: var(--k2b-surface-muted);
+}
+
+/* One status line that always keeps its height: who sees the picture, unsaved, or why saving failed. */
+.cloud-profile-picture__status {
+  display: flex;
+  min-height: 1.25rem;
+  flex: 1 1 15rem;
+  align-items: center;
+  gap: 0.5rem;
+  color: var(--k2b-text-muted);
+  font-size: 0.8125rem;
+}
+
+.cloud-profile-picture__status[data-error="true"] {
+  color: var(--k2b-danger-text);
+}
+
+.cloud-profile-picture__retry {
+  padding: 0;
+  border: 0;
+  color: var(--k2b-action);
+  background: none;
+  font: inherit;
+  font-weight: 550;
+  text-decoration: underline;
+  text-underline-offset: 3px;
+  white-space: nowrap;
+  cursor: pointer;
+}
+
+.cloud-profile-picture__retry:focus-visible {
+  outline: var(--k2b-focus-width) solid var(--k2b-focus-ring);
+  outline-offset: var(--k2b-focus-offset);
+}
+
+.cloud-profile-picture__actions {
+  display: flex;
+  flex-shrink: 0;
+  gap: 0.5rem;
+}
+
+/* The save button keeps its width while it says "Saving", so the footer never moves. */
+.cloud-profile-picture__save {
+  min-width: 10.75rem;
+}
+
+@media (max-width: 47.999rem) {
+  .cloud-profile-picture__builder {
+    grid-template-columns: minmax(0, 1fr);
+    gap: 0.625rem;
+  }
+
+  .cloud-profile-picture__preview {
+    z-index: 1;
+    flex-direction: row;
+    justify-content: flex-start;
+    gap: 0.875rem;
+    padding: 0.25rem 0 0.625rem;
+    background: var(--k2b-surface);
+  }
+
+  .cloud-profile-picture__stack {
+    display: flex;
+    flex-direction: column;
+    align-items: flex-start;
+    gap: 0.5rem;
+  }
+
+  .cloud-profile-picture__big {
+    width: 5.25rem;
+    height: 5.25rem;
+  }
+
+  .cloud-profile-picture__sizes {
+    gap: 0.5rem;
+  }
+
+  .cloud-profile-picture__sizes figure:first-child,
+  .cloud-profile-picture__sizes--dark,
+  .cloud-profile-picture__tool-label {
+    display: none;
+  }
+
+  .cloud-profile-picture__tools {
+    justify-content: flex-start;
+  }
+
+  .cloud-profile-picture__panel {
+    min-height: 0;
+  }
+
+  /* Two lines held for the failure message and Retry, so Cancel and Save never move when saving fails. */
+  .cloud-profile-picture__status {
+    min-height: 2.5rem;
+    flex-basis: 100%;
+    align-items: flex-start;
+  }
+
+  .cloud-profile-picture__actions {
+    flex: 1;
+  }
+
+  .cloud-profile-picture__actions > .k2b-button {
+    flex: 1;
+  }
+}

package/src/styles/utilities-navigation.css

@@ -785,6 +785,12 @@
   pointer-events: none;
 }
 
+/* On a phone bar tab, the tab's badge slot places the count at the icon's corner. */
+.k2b-tab-bar__badge > .cloud-app-badge {
+  position: static;
+  display: block;
+}
+
 /* On the corner of the rail icon, not of its 44 px target. */
 .rail-item > .cloud-app-badge {
   top: 0.25rem;

package/src/workflows/ai/policy.ts

@@ -0,0 +1,49 @@
+import type { AiModelProfile } from "../../ai/types";
+import { canonicalWorkflowJson } from "../language/canonical";
+
+export type WorkflowAiBudget = {
+  maxStepsPerSource: number;
+  tasksPerMinute: number;
+  burst: number;
+  sourcesPer24Hours: number;
+  scopeConcurrent: number;
+  globalConcurrent: number;
+};
+
+/** Application-owned source identity/revision, within the run's durable scope. */
+export type WorkflowAiScope = {
+  sourceId: string;
+  sourceRevision: string;
+  budget: WorkflowAiBudget;
+  recompute?: boolean;
+};
+
+export class WorkflowAiAdmissionError extends Error {
+  readonly retryable: boolean;
+  constructor(readonly code: string) {
+    super(
+      code === "WORKFLOW_AI_MODEL_CHANGED"
+        ? "Workflow AI model configuration changed. Retry the workflow to use the current model configuration."
+        : `${code}: Workflow AI admission is unavailable. Retry after capacity or the rolling budget recovers, or inspect the source manually.`,
+    );
+    this.retryable = code === "WORKFLOW_AI_CAPACITY" || code === "WORKFLOW_AI_RATE_LIMIT";
+  }
+}
+
+export const workflowAiHash = (value: unknown): string => new Bun.CryptoHasher("sha256").update(canonicalWorkflowJson(value)).digest("hex");
+
+/** v1 identifies the executor's prompt suffixes, schemas, temperature and token policy. */
+export const workflowAiModelHash = (profile: AiModelProfile): string =>
+  workflowAiHash({
+    executor: 1,
+    profile: {
+      provider: profile.provider,
+      model: profile.model,
+      baseURL: profile.baseURL,
+      contextWindow: profile.contextWindow,
+      temperature: profile.temperature,
+      maxOutputTokens: profile.maxOutputTokens,
+      reasoningEffort: profile.reasoningEffort,
+      extraBody: profile.extraBody,
+    },
+  });