@remit/web-client 0.0.68 → 0.0.70

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remit/web-client",
-  "version": "0.0.68",
+  "version": "0.0.70",
   "type": "module",
   "description": "Remit web client, published as composable primitives — the app shell, auth shells, and runtime config. A distributor imports what it composes and bundles it.",
   "exports": {

package/src/components/settings/SelfUpdatePanel.tsx

@@ -1,7 +1,7 @@
 /**
  * The self-update surface in Settings › Advanced — the only place that talks
- * about updates. Renders nothing when the surface is absent (no manifest URL,
- * not the owner, not signed in), so there is no entry point at all in that case.
+ * about updates. Renders nothing when the surface is absent (no manifest URL, or
+ * not signed in), so there is no entry point at all in that case.
  */
 import { SelfUpdateConfirmDialog, SelfUpdateSection } from "@remit/ui";
 import { useState } from "react";

package/src/lib/self-update-state.test.ts

@@ -222,13 +222,13 @@ describe("deriveUpdateSurface — the surface without a run", () => {
 		);
 	});
 
-	test("a configured surface that has not checked yet is checking", () => {
+	test("a configured surface that has not checked yet is never-checked, not a spinner", () => {
 		const result = deriveUpdateSurface(
 			input({ data: response({ check: { status: "disabled" } }) }),
 		);
 		assert.equal(
 			result.surface.status === "ready" && result.surface.section.status,
-			"checking",
+			"neverChecked",
 		);
 	});
 

package/src/lib/self-update-state.ts

@@ -112,9 +112,10 @@ export function mapUpdatePhase(phase: RemitImapSystemUpdatePhase): UpdatePhase {
 
 /**
  * The surface has no entry point for this caller: `404` (no manifest URL
- * configured), `403` (authenticated but not the instance owner), or `401` (not
- * authenticated). All three render nothing and stop the poll, so a probe cannot
- * tell an off surface from a forbidden one.
+ * configured) or `401` (not authenticated). Both render nothing and stop the
+ * poll. `403` is treated the same way as defensive cover for any authenticated
+ * edge state, though the backend no longer distinguishes callers once the
+ * surface is on.
  */
 export function isSurfaceAbsent(error: unknown): boolean {
 	const status = getErrorStatus(error);
@@ -291,10 +292,12 @@ function checkSection(
 		};
 	}
 
-	// A configured surface that has not run its first check yet reads as looking,
-	// not as up to date — the client has no basis to claim the latest.
+	// A configured surface that has not run its first check yet is never-checked,
+	// not checking: the updater runs the check on a cadence and has not written a
+	// result. A spinner here would run forever, since nothing on this poll is in
+	// flight. Only a genuine refetch (handled above) shows the spinner.
 	if (check.status === "disabled") {
-		return { status: "checking", version: data.currentVersion };
+		return { status: "neverChecked", version: data.currentVersion };
 	}
 
 	const release = releaseFromCheck(data, now);