@nanobpm/urban 0.60.0 → 0.62.0

package/dist/runtime/core/host.d.ts

@@ -336,3 +336,18 @@ export interface EngineClient {
     /** Tear down all connections. */
     close(): Promise<void>;
 }
+/**
+ * The names of every method on {@link EngineClient} — the single *runtime* source of
+ * truth for the interface's surface. It is compile-time-pinned to `keyof EngineClient`
+ * in both directions (see the two assertions below): the `satisfies` rejects a stray or
+ * misspelled name, and the exhaustiveness assertion rejects an *omitted* one, so adding,
+ * renaming, or removing an `EngineClient` method that this list does not mirror fails
+ * `npm run typecheck`.
+ *
+ * A fake/adapter (e.g. `@nanobpm/urban-testkit`'s `WasmEngineClient`) can iterate this
+ * list to assert at *runtime* that it implements the full surface — catching the
+ * "the SDK grew a method the test double lags" seam-lag class (issue #341: `openUserTasks`,
+ * and `getForm` before it) that a purely structural `implements EngineClient` check no
+ * longer catches once the fake is published/compiled against an older `@nanobpm/urban`.
+ */
+export declare const ENGINE_CLIENT_METHODS: readonly ["deployResources", "createInstance", "cancelInstance", "publishMessage", "searchUserTasks", "openUserTasks", "getForm", "completeUserTask", "searchProcessInstances", "registerWorker", "close"];

package/dist/runtime/core/host.js

@@ -42,3 +42,31 @@ export function presentFormIdentifier(value) {
     const trimmed = value?.trim();
     return trimmed ? trimmed : undefined;
 }
+/**
+ * The names of every method on {@link EngineClient} — the single *runtime* source of
+ * truth for the interface's surface. It is compile-time-pinned to `keyof EngineClient`
+ * in both directions (see the two assertions below): the `satisfies` rejects a stray or
+ * misspelled name, and the exhaustiveness assertion rejects an *omitted* one, so adding,
+ * renaming, or removing an `EngineClient` method that this list does not mirror fails
+ * `npm run typecheck`.
+ *
+ * A fake/adapter (e.g. `@nanobpm/urban-testkit`'s `WasmEngineClient`) can iterate this
+ * list to assert at *runtime* that it implements the full surface — catching the
+ * "the SDK grew a method the test double lags" seam-lag class (issue #341: `openUserTasks`,
+ * and `getForm` before it) that a purely structural `implements EngineClient` check no
+ * longer catches once the fake is published/compiled against an older `@nanobpm/urban`.
+ */
+export const ENGINE_CLIENT_METHODS = [
+    "deployResources",
+    "createInstance",
+    "cancelInstance",
+    "publishMessage",
+    "searchUserTasks",
+    "openUserTasks",
+    "getForm",
+    "completeUserTask",
+    "searchProcessInstances",
+    "registerWorker",
+    "close",
+];
+const _engineClientMethodsAreExhaustive = true;

package/dist/runtime/core/modules/pages.js

@@ -39,6 +39,15 @@ function javascript(body, status = 200, extraHeaders) {
 /** A SQL identifier guard — a table name must be a bare identifier *and* a known table
  * (checked against `schema()`), so `/app/data/:table` can never inject SQL. */
 const IDENT = /^[A-Za-z_][A-Za-z0-9_]*$/;
+// A query flag (e.g. ?count=1) is "on" when present and not one of the falsy
+// spellings. A bare `?count` (empty string) still counts as on, so a caller can
+// opt in without inventing a value.
+function isTruthyParam(v) {
+    if (v === null)
+        return false;
+    const s = v.trim().toLowerCase();
+    return s !== "0" && s !== "false" && s !== "no";
+}
 /**
  * Build the page-runtime routes over an injected datasource + engine. Pure over its deps
  * so it is unit-testable without a real host/server (see pages.test.ts).
@@ -225,6 +234,22 @@ export function createPagesRoutes(opts, deps) {
                 orderSql = ` ORDER BY ${quoteIdent(field)} ${dir}`;
             }
             const whereSql = clauses.length ? ` WHERE ${clauses.join(" AND ")}` : "";
+            // ?count=1 → a lightweight COUNT(*) instead of the rows themselves. The same
+            // whitelisted where clauses apply, so a caller (e.g. a nav item's live count
+            // badge) gets exactly the number of matching rows without transferring or
+            // materialising them. ORDER BY / LIMIT are irrelevant to a count and skipped.
+            if (isTruthyParam(req.query.get("count"))) {
+                try {
+                    const rows = await db.query(`SELECT COUNT(*) AS n FROM ${quoteIdent(table)}${whereSql}`, params);
+                    const first = Array.isArray(rows) && rows.length > 0 ? rows[0] : undefined;
+                    const rawCount = isRecord(first) ? first.n : 0;
+                    const count = Number(rawCount);
+                    return json({ count: Number.isFinite(count) ? count : 0 });
+                }
+                catch (e) {
+                    return json({ error: errorMessage(e) }, 500);
+                }
+            }
             try {
                 const rows = await db.query(`SELECT * FROM ${quoteIdent(table)}${whereSql}${orderSql} LIMIT ${rowLimit}`, params);
                 return json({ rows });
@@ -630,6 +655,11 @@ table.pc-grid th { font-weight:600; color:var(--nano-text-muted); }
 .pc-nav-link:hover { background:var(--nano-hover); color:var(--nano-text); }
 .pc-nav-link.active { background:var(--nano-accent); color:var(--nano-on-accent); }
 .pc-nav-icon { line-height:1; }
+/* A nav item's live count pill (item.badge). Slightly more compact than the base
+   .pc-badge so it sits neatly beside a nav label; [hidden] must win over the
+   .pc-badge inline-flex display so hideWhenZero / a failed fetch truly hides it. */
+.pc-nav-badge { min-width:1.1rem; height:1.1rem; font-size:.68rem; padding:0 .35rem; margin-left:.1rem; }
+.pc-nav-badge[hidden] { display:none; }
 .pc-nav-empty { color:var(--nano-text-faint); font-size:.85rem; padding:.4rem .7rem; }
 /* The per-row mobile "More" toggle (revealing mobile:{priority:"hidden"} columns)
    only exists for the card view — hidden on the desktop table, shown by the