@mars-sea/dsh-commandcode-provider 0.11.13 → 0.11.14

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.11.14] - 2026-09-24
+
+### Fixed
+
+- The settings page now delegates remote settings persistence to the DSH Host/gateway instead of silently switching non-loopback pages to a process-local read-only scope. The client always reads `settings.describe` and submits `settings.mutate`; the Host's `writable` fact and the gateway's authenticated write policy remain the authority. This allows an authenticated reverse-proxy deployment to edit settings while keeping unauthorized or Host-locked deployments read-only.
+
 ## [0.11.13] - 2026-09-24
 
 ### Changed

package/lib/client.js

@@ -37,7 +37,6 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/client/settings-scope.ts
-		const MEMORY_STATUS = "unavailable";
 		/**
 		* Backoff before re-reading a directory whose FIRST read failed, in millis.
 		*
@@ -89,7 +88,6 @@ window.__ModuleLoader__.load({
 			resolveRemote;
 			timer;
 			store;
-			persistence;
 			inFlight;
 			rerun = false;
 			generation = 0;
@@ -99,15 +97,13 @@ window.__ModuleLoader__.load({
 			disposed = false;
 			/**
 			* @param resolveRemote - Reads the inject-captured `remote.settings` namespace.
-			* @param persistence - Client-selected Host persistence; non-loopback pages may stay process-local.
 			* @param timer - Retry timer seam (see {@link SETTINGS_DESCRIBE_RETRY_MS}).
 			*/
-			constructor(resolveRemote, persistence, timer = REAL_SETTINGS_TIMER) {
+			constructor(resolveRemote, timer = REAL_SETTINGS_TIMER) {
 				this.resolveRemote = resolveRemote;
 				this.timer = timer;
-				this.persistence = persistence;
 				this.store = createSnapshotStore({
-					status: persistence === "host" ? "idle" : MEMORY_STATUS,
+					status: "idle",
 					view: null,
 					error: null
 				});
@@ -118,7 +114,7 @@ window.__ModuleLoader__.load({
 			subscribe(listener) {
 				return this.store.subscribe(listener);
 			}
-			/** The cheap idempotent entry: kick a first read (a no-op on memory persistence). */
+			/** The cheap idempotent entry: kick a first read. */
 			ensure() {
 				this.load();
 			}
@@ -128,7 +124,7 @@ window.__ModuleLoader__.load({
 			* @returns settlement after this call's freshness is reflected.
 			*/
 			load() {
-				if (this.disposed || this.persistence === "memory") return Promise.resolve();
+				if (this.disposed) return Promise.resolve();
 				this.clearRetry();
 				if (this.inFlight !== void 0) {
 					this.rerun = true;
@@ -242,33 +238,29 @@ window.__ModuleLoader__.load({
 			store;
 			mirror;
 			namespace;
-			persistence;
 			tail = Promise.resolve();
 			writeGeneration = 0;
 			disposed = false;
 			unsubscribe;
 			/** Revision answered by a superseded write still ahead of the mirror. */
 			pendingRevision;
-			constructor(resolveRemote, mirror, namespace, persistence) {
+			constructor(resolveRemote, mirror, namespace) {
 				this.resolveRemote = resolveRemote;
 				this.mirror = mirror;
 				this.namespace = namespace;
-				this.persistence = persistence;
 				this.store = createSnapshotStore({
-					status: persistence === "host" ? "loading" : "unavailable",
+					status: "loading",
 					value: void 0,
 					base: void 0,
 					user: void 0,
 					revision: void 0,
 					writable: false,
-					mode: persistence
+					mode: "host"
 				});
-				if (persistence === "host") {
-					this.unsubscribe = mirror.subscribe(() => {
-						this.derive();
-					});
+				this.unsubscribe = mirror.subscribe(() => {
 					this.derive();
-				}
+				});
+				this.derive();
 			}
 			getSnapshot() {
 				return this.store.getSnapshot();
@@ -377,9 +369,9 @@ window.__ModuleLoader__.load({
 				if (sameSnapshot(candidate, current)) return;
 				this.store.set(candidate);
 			}
-			/** Queue operations one at a time; memory persistence and disposal are no-ops. */
+			/** Queue operations one at a time; disposal makes the queue inert. */
 			enqueue(operation) {
-				if (this.persistence === "memory" || this.disposed) return Promise.resolve();
+				if (this.disposed) return Promise.resolve();
 				const task = this.tail.then(async () => {
 					if (this.disposed) return;
 					await operation();
@@ -418,26 +410,22 @@ window.__ModuleLoader__.load({
 		* @returns The scope plus the refresh/dispose handles the entry wires into its fiber.
 		*/
 		function createSettingsScope(context, namespace, resolveRemote, timer = REAL_SETTINGS_TIMER) {
-			const loopback = context.remote.$host?.isLoopback === true;
-			const persistence = loopback ? "host" : "memory";
-			const mirror = new SettingsDescribeMirror(resolveRemote, persistence, timer);
-			const scope = new RemoteSettingsScope(resolveRemote, mirror, namespace, persistence);
+			const mirror = new SettingsDescribeMirror(resolveRemote, timer);
+			const scope = new RemoteSettingsScope(resolveRemote, mirror, namespace);
 			const disposers = [];
-			if (loopback) {
-				if (typeof context.remote.$on === "function") {
-					const off = context.remote.$on("settings/document-updated", () => {
-						mirror.ensure();
-					});
-					if (typeof off === "function") disposers.push(off);
-				}
-				if (typeof context.on === "function") {
-					const off = context.on("connection/reset", () => {
-						mirror.load();
-					});
-					if (typeof off === "function") disposers.push(off);
-				}
-				mirror.ensure();
+			if (typeof context.remote.$on === "function") {
+				const off = context.remote.$on("settings/document-updated", () => {
+					mirror.ensure();
+				});
+				if (typeof off === "function") disposers.push(off);
+			}
+			if (typeof context.on === "function") {
+				const off = context.on("connection/reset", () => {
+					mirror.load();
+				});
+				if (typeof off === "function") disposers.push(off);
 			}
+			mirror.ensure();
 			return {
 				getSnapshot: () => scope.getSnapshot(),
 				subscribe: (listener) => scope.subscribe(listener),
@@ -2325,7 +2313,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region package.json
-		var version = "0.11.13";
+		var version = "0.11.14";
 		var repository = {
 			"type": "git",
 			"url": "git+https://github.com/Mars-Sea/dsh-commandcode-provider.git"