@k2b/cloud 0.49.0 → 0.50.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@k2b/cloud",
-  "version": "0.49.0",
+  "version": "0.50.0",
   "description": "Application platform library for independently deployed Hono and SolidJS services behind a dynamic gateway.",
   "license": "AGPL-3.0-or-later",
   "repository": {
@@ -131,7 +131,7 @@
     "@tailwindcss/typography": "0.5.20",
     "@k2b/nessi": "0.18.0",
     "@k2b/ssr": "0.20.2",
-    "@k2b/ui": "0.38.1",
+    "@k2b/ui": "0.39.0",
     "@k2b/stdlib": "0.30.0",
     "@k2b/sync": "7.0.1",
     "@nats-io/jetstream": "3.4.0",
@@ -163,7 +163,7 @@
     "hash-wasm": "4.12.0",
     "@types/sanitize-html": "2.16.1",
     "@types/web-push": "3.6.4",
-    "@k2b/editor": "0.2.0"
+    "@k2b/editor": "0.3.0"
   },
   "devDependencies": {
     "@babel/core": "8.0.6",

package/src/services/app-admin-facts.ts

@@ -2,6 +2,7 @@ import { managerEligibility } from "../_internal/app-access-manager-sql";
 import { sql } from "../runtime/clients";
 import type { RequestAuthority } from "../server/middleware/auth";
 import { AppAccessManagementError, canRepairAppAccess } from "./app-access-management";
+import type { LastRejectedStart } from "./app-keys";
 
 export type AppAdminFacts = {
   access: { people: number; groups: number; serviceAccounts: number; managers: number; configured: boolean } | null;
@@ -14,12 +15,14 @@ export type AppAdminFacts = {
     accountStatus: "active" | "disabled" | null;
   };
   tokens: { active: number; total: number };
+  /** Core's last refusal of a start with a verified proof; cleared by the next successful start. */
+  lastRejectedStart: Omit<LastRejectedStart, "keyId"> | null;
   events: { hears: number; sends: number | null; failedDeliveries: number; waitingDeliveries: number };
   notifications: number | null;
   firstKnownAt: string | null;
 };
 
-/** Core-owned administration summary: at most 500 input IDs and four batched SQL reads. */
+/** Core-owned administration summary: at most 500 input IDs and five batched SQL reads. */
 export const appAdminFacts = async (authority: RequestAuthority, appIds: readonly string[]): Promise<Map<string, AppAdminFacts>> => {
   if (!canRepairAppAccess(authority)) throw new AppAccessManagementError("FORBIDDEN", "Cloud administration authority is required.");
   if (appIds.length > 500) throw new AppAccessManagementError("TOO_MANY_APPS", "At most 500 application IDs may be read at once.", 400);
@@ -31,6 +34,7 @@ export const appAdminFacts = async (authority: RequestAuthority, appIds: readonl
         access: null,
         keys: { active: 0, expired: 0, revoked: 0, lastUsedAt: null, firstCreatedAt: null, accountStatus: null },
         tokens: { active: 0, total: 0 },
+        lastRejectedStart: null,
         events: { hears: 0, sends: 0, failedDeliveries: 0, waitingDeliveries: 0 },
         notifications: 0,
         firstKnownAt: null,
@@ -39,7 +43,7 @@ export const appAdminFacts = async (authority: RequestAuthority, appIds: readonl
   );
   if (!ids.length) return facts;
 
-  const [access, credentials, events, notifications] = await Promise.all([
+  const [access, credentials, events, notifications, rejections] = await Promise.all([
     sql<
       {
         app_id: string;
@@ -125,6 +129,9 @@ export const appAdminFacts = async (authority: RequestAuthority, appIds: readonl
       SELECT app_id, count(*)::int AS count FROM notifications.definitions
       WHERE app_id IN ${sql(ids)} AND active = true GROUP BY app_id
     `,
+    sql<{ app_id: string; rejected_at: Date; reason: LastRejectedStart["reason"] }[]>`
+      SELECT app_id, rejected_at, reason FROM auth.app_start_rejections WHERE app_id IN ${sql(ids)}
+    `,
   ]);
 
   for (const row of access) {
@@ -156,5 +163,6 @@ export const appAdminFacts = async (authority: RequestAuthority, appIds: readonl
     facts.get(row.app_id)!.events = { hears: row.hears, sends: row.sends, failedDeliveries: row.failed, waitingDeliveries: row.waiting };
   }
   for (const row of notifications) facts.get(row.app_id)!.notifications = row.count;
+  for (const row of rejections) facts.get(row.app_id)!.lastRejectedStart = { at: row.rejected_at.toISOString(), reason: row.reason };
   return facts;
 };

package/src/shared-text/documents.ts

@@ -152,7 +152,7 @@ export const bindDocuments = <Saved, Context>(
       // A request cancelled while the callback ran must not publish a write.
       options.signal?.throwIfAborted();
       const beforeEditState = Y.encodeStateVector(doc);
-      const finishHistory = options.actionId ? prepareStructuralHistory(ytext, changes) : undefined;
+      const finishHistory = options.actionId ? prepareStructuralHistory(ytext, changes) : prepareIngressHistory(ytext);
       if (prepared) {
         // Application-prepared transactions preserve exact item identities and
         // may be replayed after a partial publication/persistence failure.
@@ -168,7 +168,7 @@ export const bindDocuments = <Saved, Context>(
       const actor = options.actor;
       const updateBytes = Y.encodeStateAsUpdate(doc, beforeEditState);
       const receipt = options.actionId ? { actionId: options.actionId, update: updateBytes } : undefined;
-      const history: SharedTextStructuralHistory = finishHistory?.() ?? { patches: [], tables: [], ingressBarrier: true };
+      const history: SharedTextStructuralHistory = finishHistory();
       if (history && options.inverseOf) {
         history.inverseOf = options.inverseOf;
         history.retained = options.retained?.() ?? false;