@quazardous/qdadm 2.21.0 → 2.22.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (46) hide show
  1. package/dist/node/vite/qdadmDebugPlugin.d.ts +9 -4
  2. package/dist/node/vite/qdadmDebugPlugin.js +36 -10
  3. package/dist/node/vite/qdadmPlugin.js +2 -0
  4. package/dist/styles/qdadm.css +1 -0
  5. package/package.json +10 -4
  6. package/src/components/edit/FormField.vue +51 -4
  7. package/src/components/edit/FormInput.vue +44 -2
  8. package/src/components/edit/FormPage.vue +7 -2
  9. package/src/components/edit/formFieldIds.ts +11 -0
  10. package/src/components/editors/RoleGrantsEditor.vue +355 -0
  11. package/src/components/index.ts +1 -0
  12. package/src/components/layout/AppLayout.vue +3 -1
  13. package/src/components/layout/BaseLayout.vue +3 -1
  14. package/src/components/show/ShowPage.vue +4 -2
  15. package/src/composables/confirmDelete.ts +35 -0
  16. package/src/composables/index.ts +1 -0
  17. package/src/composables/useEntityItemFormPage.ts +2 -3
  18. package/src/composables/useEntityItemFormPage.types.ts +1 -0
  19. package/src/composables/useEntityItemShowPage.ts +3 -3
  20. package/src/composables/useGuardStore.ts +7 -1
  21. package/src/composables/useListPage.ts +3 -6
  22. package/src/composables/useListPage.types.ts +1 -0
  23. package/src/composables/useSecurity.ts +41 -0
  24. package/src/i18n/defaults/DefaultCoreProvider.ts +4 -2
  25. package/src/i18n/defaults/__tests__/generated-sync.test.ts +9 -0
  26. package/src/i18n/defaults/core.en.generated.ts +20 -0
  27. package/src/i18n/defaults/core.en.yml +20 -0
  28. package/src/i18n/defaults/core.fr.generated.ts +20 -0
  29. package/src/i18n/defaults/core.fr.yml +20 -0
  30. package/src/index.ts +1 -0
  31. package/src/kernel/Kernel.routing.ts +20 -4
  32. package/src/kernel/Kernel.ts +3 -0
  33. package/src/kernel/Kernel.vue.ts +3 -0
  34. package/src/kernel/chunkReload.ts +110 -0
  35. package/src/kernel/vitePluginCheck.ts +61 -0
  36. package/src/modules/debug/DebugModule.ts +9 -0
  37. package/src/notifications/NotificationListener.vue +2 -1
  38. package/src/security/index.ts +17 -0
  39. package/src/security/pages/RoleForm.vue +42 -191
  40. package/src/security/roleGrants.ts +210 -0
  41. package/src/styles/_forms.scss +10 -2
  42. package/src/styles/index.d.ts +3 -4
  43. package/src/toast/ToastListener.vue +2 -1
  44. package/src/types/index.ts +10 -0
  45. package/src/vite/qdadmDebugPlugin.ts +46 -10
  46. package/src/vite/qdadmPlugin.ts +2 -0
@@ -8,10 +8,12 @@
8
8
  * GET /__qdadm/snapshot.json — bridge.dump() (live state)
9
9
  * POST /__qdadm/call — body {collector, action, args?}
10
10
  *
11
- * Session selection: every browser tab that loads the app gets a fresh
12
- * session id (uuid in the injected client). All endpoints accept a
13
- * `?session=<id|latest>` query param. Default is `latest` (the most recently
14
- * active session).
11
+ * Session selection: every browser tab gets a session id (uuid in the
12
+ * injected client), kept in sessionStorage so a reload is the SAME session
13
+ * (#2231). A tab that says bye stays known through a short grace window: a
14
+ * request to it answers "reloading" instead of timing out. All endpoints
15
+ * accept a `?session=<id|latest>` query param. Default is `latest` (the most
16
+ * recently active connected session).
15
17
  *
16
18
  * Wire-up: the plugin injects a small ESM script via `transformIndexHtml`.
17
19
  * That inline script lives in Vite's HMR pipeline (so `import.meta.hot`
@@ -78,6 +80,8 @@ interface SessionState {
78
80
  describe: { data: unknown; at: number } | null
79
81
  snapshot: { data: unknown; at: number } | null
80
82
  meta: Record<string, unknown>
83
+ /** Set by bye; cleared by the next push from the same tab. */
84
+ disconnectedAt: number | null
81
85
  }
82
86
 
83
87
  /** Broker surface exposed to sibling plugins via `plugin.api` (#1398). */
@@ -95,6 +99,7 @@ export interface QdadmDebugPluginApi {
95
99
  ageMs: number
96
100
  hasDescribe: boolean
97
101
  hasSnapshot: boolean
102
+ connected: boolean
98
103
  meta: Record<string, unknown>
99
104
  }>
100
105
  prefix: string
@@ -107,12 +112,15 @@ export interface QdadmDebugPluginOptions {
107
112
  timeoutMs?: number
108
113
  /** Drop sessions inactive for this many ms (default 10 min) */
109
114
  sessionTtlMs?: number
115
+ /** Keep a tab that said bye this long, so its reload keeps it (default 30 s) */
116
+ reloadGraceMs?: number
110
117
  }
111
118
 
112
119
  export function qdadmDebugPlugin(options: QdadmDebugPluginOptions = {}): Plugin {
113
120
  const prefix = options.prefix ?? '/__qdadm'
114
121
  const timeoutMs = options.timeoutMs ?? 3000
115
122
  const sessionTtlMs = options.sessionTtlMs ?? 10 * 60 * 1000
123
+ const reloadGraceMs = options.reloadGraceMs ?? 30 * 1000
116
124
 
117
125
  const sessions = new Map<string, SessionState>()
118
126
  const pending = new Map<string, PendingRequest>()
@@ -120,18 +128,25 @@ export function qdadmDebugPlugin(options: QdadmDebugPluginOptions = {}): Plugin
120
128
  let nextId = 1
121
129
 
122
130
  function pruneStaleSessions(): void {
123
- const cutoff = Date.now() - sessionTtlMs
131
+ const now = Date.now()
124
132
  for (const [id, s] of sessions) {
125
- if (s.lastSeenAt < cutoff) sessions.delete(id)
133
+ if (s.lastSeenAt < now - sessionTtlMs) sessions.delete(id)
134
+ else if (s.disconnectedAt !== null && s.disconnectedAt < now - reloadGraceMs) sessions.delete(id)
126
135
  }
127
136
  }
128
137
 
129
138
  function pickSession(sessionParam: string | null): SessionState | null {
130
139
  pruneStaleSessions()
131
140
  if (!sessionParam || sessionParam === 'latest') {
141
+ // A connected tab wins; a reloading one only when nothing else is up,
142
+ // so the caller hears "reloading" rather than "no session".
132
143
  let best: SessionState | null = null
133
144
  for (const s of sessions.values()) {
134
- if (!best || s.lastSeenAt > best.lastSeenAt) best = s
145
+ const better =
146
+ !best ||
147
+ (best.disconnectedAt !== null && s.disconnectedAt === null) ||
148
+ ((best.disconnectedAt === null) === (s.disconnectedAt === null) && s.lastSeenAt > best.lastSeenAt)
149
+ if (better) best = s
135
150
  }
136
151
  return best
137
152
  }
@@ -144,6 +159,15 @@ export function qdadmDebugPlugin(options: QdadmDebugPluginOptions = {}): Plugin
144
159
  sessionId?: string
145
160
  ): Promise<unknown> {
146
161
  if (!server) return Promise.reject(new Error('[qdadm-debug] vite server not ready'))
162
+ const target = sessionId ? sessions.get(sessionId) : undefined
163
+ if (target?.disconnectedAt) {
164
+ const away = Math.round((Date.now() - target.disconnectedAt) / 1000)
165
+ return Promise.reject(
166
+ new Error(
167
+ `[qdadm-debug] session ${target.id.slice(0, 8)} left ${away}s ago — the tab is most likely reloading; retry in a few seconds`
168
+ )
169
+ )
170
+ }
147
171
  const id = String(nextId++)
148
172
  return new Promise((resolve, reject) => {
149
173
  const timeout = setTimeout(() => {
@@ -200,6 +224,7 @@ export function qdadmDebugPlugin(options: QdadmDebugPluginOptions = {}): Plugin
200
224
  ageMs: number
201
225
  hasDescribe: boolean
202
226
  hasSnapshot: boolean
227
+ connected: boolean
203
228
  meta: Record<string, unknown>
204
229
  }> {
205
230
  pruneStaleSessions()
@@ -213,6 +238,7 @@ export function qdadmDebugPlugin(options: QdadmDebugPluginOptions = {}): Plugin
213
238
  ageMs: now - s.lastSeenAt,
214
239
  hasDescribe: !!s.describe,
215
240
  hasSnapshot: !!s.snapshot,
241
+ connected: s.disconnectedAt === null,
216
242
  meta: s.meta,
217
243
  }))
218
244
  }
@@ -227,10 +253,12 @@ export function qdadmDebugPlugin(options: QdadmDebugPluginOptions = {}): Plugin
227
253
  describe: null,
228
254
  snapshot: null,
229
255
  meta: meta ?? {},
256
+ disconnectedAt: null,
230
257
  }
231
258
  sessions.set(id, s)
232
259
  } else {
233
260
  s.lastSeenAt = Date.now()
261
+ s.disconnectedAt = null
234
262
  if (meta) s.meta = { ...s.meta, ...meta }
235
263
  }
236
264
  return s
@@ -287,7 +315,7 @@ export function qdadmDebugPlugin(options: QdadmDebugPluginOptions = {}): Plugin
287
315
  } else if (msg.type === 'snapshot' && msg.data !== undefined) {
288
316
  session.snapshot = { data: msg.data, at }
289
317
  } else if (msg.type === 'bye') {
290
- sessions.delete(msg.sessionId)
318
+ session.disconnectedAt = at
291
319
  }
292
320
  })
293
321
 
@@ -376,7 +404,8 @@ function readBody(req: IncomingMessage): Promise<string> {
376
404
  * Client-side bridge — injected verbatim into index.html as an ES module.
377
405
  * Lives in Vite's HMR pipeline (so `import.meta.hot` works here).
378
406
  *
379
- * Each tab gets its own session id (random uuid). Pushes describe + snapshot
407
+ * Each tab gets its own session id (random uuid, kept across reloads in
408
+ * sessionStorage — #2231). Pushes describe + snapshot
380
409
  * on every reactive tick of the bridge so the plugin's per-session cache
381
410
  * stays fresh. Listens for ad-hoc requests targeted at this session.
382
411
  */
@@ -413,7 +442,14 @@ const hot = import.meta.hot
413
442
  if (!hot) {
414
443
  console.warn('[qdadm-debug] import.meta.hot unavailable in injected script')
415
444
  } else {
416
- const sessionId = crypto.randomUUID()
445
+ // Same tab, same session across reloads (#2231): an agent's target survives F5.
446
+ const sessionId = (() => {
447
+ try {
448
+ let v = sessionStorage.getItem('qdadm-debug:session')
449
+ if (!v) { v = crypto.randomUUID(); sessionStorage.setItem('qdadm-debug:session', v) }
450
+ return v
451
+ } catch (e) { return crypto.randomUUID() }
452
+ })()
417
453
  const meta = { userAgent: navigator.userAgent, location: location.pathname }
418
454
  let bridge = null
419
455
  let lastTick = -1
@@ -118,6 +118,8 @@ export function qdadmVitePlugin(options: QdadmVitePluginOptions = {}): Plugin {
118
118
  exclude: [...widgetExcludes, ...themesExcludes, '@quazardous/qdadm'],
119
119
  },
120
120
  ...(fsAllow.length > 0 ? { server: { fs: { allow: fsAllow } } } : {}),
121
+ // The kernel checks it: an app without this plugin is told what to add (#2259).
122
+ define: { __QDADM_VITE_PLUGIN__: 'true' },
121
123
  }
122
124
  },
123
125
  }