@lotics/app-sdk 0.45.0 → 0.46.1

package/AGENTS.md

@@ -133,7 +133,12 @@ Pick by intent. (→ open the `.d.ts` for the exact signature.)
 - **`readSelect(cell)`** → `ResolvedOption[]` `{ key, label, color? }` (a cell carries key+label; the
   `color` is populated by `useFieldOptions`, not the cell). **`readMembers(cell)`** → `{ id, name,
   email? }[]`. **`readLinks(cell)` / `row.link`** → `{ id, display }`. **`readFiles(cell)`** →
-  `AppFile[]` with presigned `url` + `thumbnail_url` (24 h). **`readLocked(row)`** → `boolean` from the
+  `AppFile[]` with presigned `url` + `thumbnail_url` (24 h) **+ `size` (bytes) + `created_at` (ISO
+  date-added), resolved from the file object at read**. Surface size/date as **dedicated sortable
+  `Table` columns over the RAW numeric** — the `tpl_documents` document-register pattern (a `Size`
+  column `align:"right"` + an `Added` column, formatted only at display; NOT a crammed `FileRow` `meta`
+  string, which sorts wrong — "8.4 MB" < "96 KB"). `size` is absent for older files until backfilled —
+  render it only when present. **`readLocked(row)`** → `boolean` from the
   `__source_locked` addressing column.
 - **`project` only what you render** and `filter` server-side: a bare `from_table` ships every column
   — incl. `files` with storage keys — to the client (over-exposure + presign-500 at scale). A code

package/dist/src/row.d.ts

@@ -68,6 +68,16 @@ export interface AppFile {
     url: string;
     /** Presigned thumbnail URL for images, when the server produced one. */
     thumbnail_url?: string;
+    /** Byte size of the file, resolved from the file object at serving time. Absent
+     *  for older files not yet backfilled — show a size only when present. Prefer a
+     *  dedicated sortable `Table` column over the RAW number (the `tpl_documents`
+     *  register: a right-aligned "Size" column, formatted at display) — not a crammed
+     *  `FileRow` meta string, which sorts wrong ("8.4 MB" < "96 KB"). */
+    size?: number | null;
+    /** ISO upload timestamp (date-added), resolved at serving time. Show as a
+     *  dedicated "Added" `Table` column (format with `formatDate`), sortable over the
+     *  raw ISO value. */
+    created_at?: string;
 }
 /**
  * files field → the attached files with their presigned `url` (empty if none).

package/dist/src/row.js

@@ -123,12 +123,16 @@ export function readFiles(v) {
         const filename = f.filename;
         const mime = f.mime_type;
         const thumb = f.thumbnail_url;
+        const size = f.size;
+        const created_at = f.created_at;
         out.push({
             id,
             filename: typeof filename === "string" ? filename : "",
             mime_type: typeof mime === "string" ? mime : "",
             url,
             thumbnail_url: typeof thumb === "string" ? thumb : undefined,
+            size: typeof size === "number" ? size : undefined,
+            created_at: typeof created_at === "string" ? created_at : undefined,
         });
     }
     return out;

package/dist/src/rpc.js

@@ -365,6 +365,12 @@ export function transportErrorMessage(status, parsed) {
         ? gatewayErrorMessage(status)
         : jsonMessage;
 }
+// Standalone requests carried no timeout: a hung or slow backend pinned the
+// fetch — and one of the browser's few per-origin connections — indefinitely,
+// surfacing as an app that "loads forever". Bound every standalone call the way
+// the bridged host path already bounds its own (`apiFetch`, 30s): a stalled
+// request fails fast with a gateway-timeout message instead of spinning.
+const API_TIMEOUT_MS = 30_000;
 async function apiCall(method, path, body, opts) {
     const headers = {};
     if (body)
@@ -372,11 +378,32 @@ async function apiCall(method, path, body, opts) {
     if (sessionToken && !opts?.skipAuth) {
         headers["authorization"] = `Bearer ${sessionToken}`;
     }
-    const res = await fetch(`${API_BASE}${path}`, {
-        method,
-        headers,
-        body: body ? JSON.stringify(body) : undefined,
-    });
+    const controller = new AbortController();
+    let didTimeout = false;
+    const timeoutId = setTimeout(() => {
+        didTimeout = true;
+        controller.abort();
+    }, API_TIMEOUT_MS);
+    let res;
+    try {
+        res = await fetch(`${API_BASE}${path}`, {
+            method,
+            headers,
+            body: body ? JSON.stringify(body) : undefined,
+            signal: controller.signal,
+        });
+    }
+    catch (err) {
+        // A timeout abort surfaces as an AbortError — convert it to the same
+        // body-free gateway-timeout message a 524 produces, never a raw abort.
+        if (didTimeout && err instanceof DOMException && err.name === "AbortError") {
+            throw new Error(gatewayErrorMessage(524));
+        }
+        throw err;
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
     const text = await res.text();
     let parsed = null;
     if (text) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/app-sdk",
-  "version": "0.45.0",
+  "version": "0.46.1",
   "description": "Runtime SDK for Lotics custom-code apps — typed hooks, postMessage bridge, mount entry point",
   "type": "module",
   "exports": {