@lotics/app-sdk 0.123.11 → 0.124.1

package/AGENTS.md

@@ -14,17 +14,17 @@ This file is the index. The **exact type** of anything is its shipped declaratio
 
 | Doc | Read it for |
 |---|---|
-| [docs/data_fetching.md](./docs/data_fetching.md) | The reads: `useQuery(alias, params, opts)` — its rows (`limit`), numbered pages (`page`), a keyset feed (`more`), its `total` or the total alone, with `total: { by }` a count per value of one column and `total: { where }` a count per named filter, from one scan — `useQueries` for reads known only at render, `queryAll` outside React, `exportQuery` for a file of them the server makes; every hook answers one `QueryState`. The ROW type (`RowOf` — the alias's projected columns and nothing else), runtime `sort`/`filter` keys, cell readers (`row.*`, `readSelect`, `readMembers`, `readLinks`, `readFiles`, `readLocked`, `readCreatedAt`/`readUpdatedAt`), the SDK's own cache — **arrival revalidates** — **realtime push** and `answeredAt` (the server answering again what a screen drew), a write drawn on every read from the press, a count as its own full scan, and the search-as-you-type and record-picker patterns. |
+| [docs/data_fetching.md](./docs/data_fetching.md) | The reads: `useQuery(alias, params, opts)` — its rows (`limit`), numbered pages (`page`), a keyset feed (`more`), its `total` or the total alone, with `total: { by }` a count per value of one column and `total: { where }` a count per named filter, from one scan — `useQueries` for reads known only at render, `queryAll` outside React, `exportQuery` for a file of them the server makes; every hook answers one `QueryState`. The ROW type (`RowOf` — the alias's projected columns and nothing else), runtime `sort`/`filter` keys, cell readers (`row.*`, `readSelect`, `readMembers`, `readLinks`, `readFiles`, `readLocked`/`readLockedBy`, `readCreatedAt`/`readUpdatedAt`), the SDK's own cache — **arrival revalidates** — **realtime push** and `answeredAt` (the server answering again what a screen drew), a write drawn on every read from the press, a count as its own full scan, and the search-as-you-type and record-picker patterns. |
 | [docs/queries.md](./docs/queries.md) | **The query engine reference** — AST node kinds, per-field-type operators, filters/params/pruning, free-text search, combining tables, shaping (aggregates, date buckets, windows), runtime refinement bounds, limits and the efficiency playbook. |
 | [docs/mutations.md](./docs/mutations.md) | `useWorkflow` (the ONLY write path; `useWorkflows` for writes that are data), the `WorkflowResult` resolve-never-throw contract (`field_errors`), typed inputs, every write drawn on every read from the press — predicted from the workflow's own steps, taken back on a refusal, `pending` meanwhile — the re-read a successful write triggers over the tables its body names, diff-before-update, locked records, `useNewRecord`, read-after-write ordering (`writesSettled()`), `useRecording`, `useRecordings` over several aliases. |
 | [docs/workflows.md](./docs/workflows.md) | **The workflow-BODY reference** — the JS subset a body may use, opaque `fld_*`/`opt_*` keys, every step form, the accepted sugar, helpers, record-write surfaces, the traps and the verify loop. |
 | [docs/recipes.md](./docs/recipes.md) | Task-shaped how-tos — returning a generated file, returning structured data, parameterized lookups, composable optional filters, cell decoding, testing an AI action without spending credits. |
 | [docs/files.md](./docs/files.md) | Files end to end — `useFileUpload` and its `fidelity` and a photo's `place`, `renameFile` (a new file over the same bytes), `useAttachments`/`useAttachmentPiles`, `readFiles` and presigned URLs (a bearer credential — never logged or persisted), workflow-generated files, naming a zip's entries, the delivery bounds. |
-| [docs/members_and_options.md](./docs/members_and_options.md) | People, select options and comments — `useMembers`, `useFieldOptions`, `useViewer`, `useWorkspaceTimezone`/`useWorkspaceCurrency`, `useAppContext`, the workspace's zone at the root, `useComments`, a record's activity and the undo of one change (`useRecordActivity`, `undoRecordChange`). |
+| [docs/members_and_options.md](./docs/members_and_options.md) | People, select options and comments — `useMembers`, `useFieldOptions`, `useViewer`, `useWorkspaceTimezone`/`useWorkspaceCurrency`, `useAppContext`, the workspace's zone at the root, `useComments`, a member's links to one record for a person with no seat (`useOutsideLinks`). |
 | [docs/navigation_and_state.md](./docs/navigation_and_state.md) | `AppRouter` (embedded/standalone URL model, the screens and `drawers` it reports to the host), `useUrlState` + `urlParam` codecs, `useRecents`, `useFolderPick`. |
 | [docs/ai.md](./docs/ai.md) | `useAgentRun` (structured vs free-text, streaming parts, the agent's ask-back), `askAi`, `useAiContext`, and what the member's own chat agent can do with the app while it is open. |
 | [docs/security.md](./docs/security.md) | **Read before shipping** — the owner-principal model, `is_current_member` scoping, write attribution, group gates, public-app bounds, why a per-input bound is a tenancy floor rather than an authorization check. |
-| [docs/runtime.md](./docs/runtime.md) | `mount()` and the errors it reports to the host (`reportAppError`), the two transports, the API address a standalone bundle reads out of its own page (`<meta name="lotics-api-base">`), `rpc()`, the mock harness (`fixture` + `?__mock=1` — queries, workflows and agents, a mocked agent's run played line by line), `openExternal`/`openApp`/`peekApp`/`downloadFile`, geofencing, the peer dependencies. |
+| [docs/runtime.md](./docs/runtime.md) | `mount()` and the errors it reports to the host (`reportAppError`), the two transports, the API address a standalone bundle reads out of its own page (`<meta name="lotics-api-base">`), `rpc()` and `installRpcTransport` (a page that is never an app's answers every op itself), the mock harness (`fixture` + `?__mock=1` — queries, workflows and agents, a mocked agent's run played line by line), `openExternal`/`openApp`/`peekApp`/`downloadFile`, geofencing, the peer dependencies. |
 
 ## Non-negotiables (each detailed in its doc)
 

package/dist/{chunk-COWN73CO.js → chunk-BWMAO5IY.js}

@@ -249,6 +249,18 @@ function isFieldKey(value) {
   return value.startsWith(FIELD_KEY_PREFIX);
 }
 
+// ../shared/src/compare_bounds.ts
+var COMPARE_KEYS = ["gt", "gte", "lt", "lte"];
+function isRecordBound(bound) {
+  return typeof bound === "object" && "record" in bound;
+}
+function boundsOf(compared) {
+  return COMPARE_KEYS.flatMap((key) => {
+    const bound = compared[key];
+    return bound === void 0 ? [] : [{ key, bound }];
+  });
+}
+
 // ../shared/src/schemas/app_spec_rules.ts
 var bandKey = (band) => `${band.min ?? ""}..${band.max ?? ""}`;
 function bandOf(tiers, figure) {
@@ -256,6 +268,8 @@ function bandOf(tiers, figure) {
   const at = above < 0 ? tiers.length : above;
   return { min: tiers[at - 1] ?? null, max: tiers[at] ?? null };
 }
+var AGENT_SCAN_READS = ["text", "iso6346"];
+var SCAN_READS = [...AGENT_SCAN_READS, "code"];
 
 // ../../node_modules/big.js/big.mjs
 var DP = 20;
@@ -1315,7 +1329,15 @@ function getHostOrigin() {
 function isEmbedded() {
   return Boolean(getHostOrigin());
 }
+var installedTransport = null;
+function installRpcTransport(transport) {
+  installedTransport = transport;
+}
+function hostSpec() {
+  return rpc("spec", {});
+}
 function rpc(op, payload) {
+  if (installedTransport !== null) return installedTransport(op, payload);
   const hostOrigin = getHostOrigin();
   return hostOrigin ? rpcBridged(op, payload, hostOrigin) : rpcStandalone(op, payload);
 }
@@ -1750,6 +1772,8 @@ function rpcStandalone(op, payload) {
       return standaloneMembers(payload);
     case "context":
       return standaloneContext();
+    case "spec":
+      return Promise.reject(new Error("A standalone app carries its spec in its document; only the Lotics host hands one over the bridge."));
     case "write_model":
       return standaloneWriteModel();
     case "prediction_miss":
@@ -1780,14 +1804,15 @@ function rpcStandalone(op, payload) {
     case "comments.delete":
     case "comments.counts":
       return rejectCommentsStandalone();
-    case "activity.list":
-    case "activity.undo":
-      return Promise.reject(new Error("A record's activity is available only in embedded apps \u2014 a signed-in member is required."));
     case "recording.start":
     case "recording.stop":
       return Promise.reject(
         new Error("Recording needs the Lotics host and a signed-in member. Gate the control on useRecording's `available`.")
       );
+    case "outsideLink.list":
+    case "outsideLink.create":
+    case "outsideLink.revoke":
+      return Promise.reject(new Error("A link to a record is made and withdrawn by a signed-in member in the Lotics host. Gate the control on useOutsideLinks' `available`."));
   }
 }
 function folderTable(payload) {
@@ -2000,6 +2025,9 @@ export {
   searchWords,
   customAlphabet,
   isFieldKey,
+  COMPARE_KEYS,
+  isRecordBound,
+  boundsOf,
   bandKey,
   bandOf,
   addDecimal,
@@ -2030,6 +2058,8 @@ export {
   applyPatch,
   paramsEqual,
   isEmbedded,
+  installRpcTransport,
+  hostSpec,
   rpc,
   getUrlParams,
   setUrlParams,

package/dist/comments.d.ts

@@ -51,7 +51,7 @@ export interface CommentsState {
 export interface UseCommentsArgs {
     record_id: string;
 }
-/** What every read a comment changes is read under — the counts, a record's activity — so a comment written or deleted asks each again. */
+/** What every read a comment changes is read under — the counts — so a comment written or deleted asks each again. */
 export declare const COMMENT_WRITES = "comment-counts";
 /**
  * `record_id` must be a real id — an empty string still fetches. Gate the

package/dist/index.d.ts

@@ -11,18 +11,17 @@ export type { ExportedFile } from "./shared_types.js";
 export type { AttachedFile, AttachmentPiles, AttachmentPilesOptions, AttachmentsOptions, AttachmentsState } from "./attachments.js";
 export { useComments, useCommentCounts } from "./comments.js";
 export type { AppComment, AppCommentAuthor, AppCommentFile, CommentsState, UseCommentsArgs, CommentCountsState, UseCommentCountsArgs, } from "./comments.js";
-export { undoRecordChange, useRecordActivity } from "./activity.js";
-export type { RecordActivityOptions, RecordActivityState } from "./activity.js";
-export type { ActivityActor, ActivityActorKind, ActivityChange, ActivityComment, ActivityEntry, ActivityUndoResult, ActivityValue, RecordActivityPage, UndoKeptReason, } from "./shared_types.js";
 export { useAppContext, useViewer, useWorkspaceCurrency, useWorkspaceTimezone } from "./viewer.js";
 export type { AppAbsence } from "./shared_types.js";
+export { useOutsideLinks } from "./outside_link.js";
+export type { OutsideLinksState } from "./outside_link.js";
 export { useRecording, useRecordings } from "./recording.js";
 export type { UseRecording, UseRecordings } from "./recording.js";
 export type { RecordingState, RecordingInputs } from "./recording_state.js";
 export { requestGeofencedLocation, isWithinZone } from "./geolocation.js";
 export type { GeofenceZone, GeoCoords, GeofenceOutcome, GeofenceOptions } from "./geolocation.js";
-export { rpc, isEmbedded } from "./rpc.js";
-export type { RpcOp, AiContextValue, AiContextRecordRef } from "./rpc.js";
+export { rpc, hostSpec, isEmbedded, installRpcTransport } from "./rpc.js";
+export type { RpcOp, RpcTransport, HostSpec, AiContextValue, AiContextRecordRef } from "./rpc.js";
 export { openExternal } from "./open_external.js";
 export { openApp, peekApp } from "./open_app.js";
 export { askAi, type AskAiArgs } from "./ask_ai.js";
@@ -35,7 +34,7 @@ export type { ResolvedOption } from "./select.js";
 export type { AppFixture, MockExport, MockQuery, MockQueryCall, MockWorkflow } from "./mock.js";
 export type { MockAgent, MockAgentRun } from "./mock_agent_run.js";
 export type { AppWorkflows, AppWorkflowResults, AppQueries, AppQueryColumns, AppAgents, AppAgentResults } from "./types.js";
-export { row, readLinks, readFiles, readLocked, readCreatedAt, readUpdatedAt, PENDING } from "./row.js";
+export { row, readLinks, readFiles, readLocked, readLockedBy, readCreatedAt, readUpdatedAt, PENDING } from "./row.js";
 export type { ResolvedLink, AppFile, PhotoPlace } from "./row.js";
 export { useNewRecord, newRecordId } from "./new_record.js";
 export type { NewRecordApi } from "./new_record.js";