@treenity/react 3.0.1 → 3.0.2

package/dist/mods/treenity/ref-view.js

@@ -1,5 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 // Ref node/component view — shows target path, resolve button, inline preview
+import { Button } from '#components/ui/button';
 import { Render } from '#context';
 import { usePath } from '#hooks';
 import { register } from '@treenity/core';
@@ -21,7 +22,7 @@ function RefListItem({ value }) {
 function RefDisplay({ target, onSelect }) {
     const [resolved, setResolved] = useState(false);
     const targetNode = usePath(resolved ? target : null);
-    return (_jsxs("div", { className: "space-y-3", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx("span", { className: "text-muted-foreground text-sm", children: "ref" }), _jsx("span", { className: "text-sm font-mono text-primary", children: target }), onSelect && (_jsx("button", { className: "text-xs px-2 py-0.5 rounded bg-muted hover:bg-muted/80 text-foreground border border-border", onClick: () => onSelect(target), children: "Go to" })), _jsx("button", { className: "text-xs px-2 py-0.5 rounded bg-muted hover:bg-muted/80 text-foreground border border-border", onClick: () => setResolved(!resolved), children: resolved ? 'Collapse' : 'Resolve' })] }), resolved && (_jsx("div", { className: "border border-border rounded p-3 bg-muted/30", children: targetNode ? (_jsxs("div", { className: "space-y-1", children: [_jsxs("div", { className: "flex items-center gap-2 text-xs text-muted-foreground mb-2", children: [_jsx("span", { className: "font-mono", children: targetNode.$type }), _jsx("span", { children: targetNode.$path })] }), _jsx(Render, { value: targetNode })] })) : (_jsx("div", { className: "text-sm text-muted-foreground", children: "Loading..." })) }))] }));
+    return (_jsxs("div", { className: "space-y-3", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx("span", { className: "text-muted-foreground text-sm", children: "ref" }), _jsx("span", { className: "text-sm font-mono text-primary", children: target }), onSelect && (_jsx(Button, { variant: "outline", size: "sm", className: "h-auto px-2 py-0.5 text-xs", onClick: () => onSelect(target), children: "Go to" })), _jsx(Button, { variant: "outline", size: "sm", className: "h-auto px-2 py-0.5 text-xs", onClick: () => setResolved(!resolved), children: resolved ? 'Collapse' : 'Resolve' })] }), resolved && (_jsx("div", { className: "border border-border rounded p-3 bg-muted/30", children: targetNode ? (_jsxs("div", { className: "space-y-1", children: [_jsxs("div", { className: "flex items-center gap-2 text-xs text-muted-foreground mb-2", children: [_jsx("span", { className: "font-mono", children: targetNode.$type }), _jsx("span", { children: targetNode.$path })] }), _jsx(Render, { value: targetNode })] })) : (_jsx("div", { className: "text-sm text-muted-foreground", children: "Loading..." })) }))] }));
 }
 // ── Registration ──
 register('ref', 'react', RefNodeView);

package/dist/mods/treenity/ref-view.js.map

@@ -1 +1 @@
-{"version":3,"file":"ref-view.js","sourceRoot":"","sources":["../../../src/mods/treenity/ref-view.tsx"],"names":[],"mappings":";AAAA,8EAA8E;AAE9E,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAiB,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjC,gEAAgE;AAEhE,SAAS,WAAW,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAuD;IAC3F,MAAM,GAAG,GAAI,KAAa,CAAC,IAA0B,CAAC;IACtD,IAAI,CAAC,GAAG;QAAE,OAAO,cAAK,SAAS,EAAC,+BAA+B,sCAA4B,CAAC;IAE5F,OAAO,KAAC,UAAU,IAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,GAAI,CAAC;AACzD,CAAC;AAED,oDAAoD;AAEpD,SAAS,WAAW,CAAC,EAAE,KAAK,EAAuB;IACjD,MAAM,GAAG,GAAI,KAAa,CAAC,IAA0B,CAAC;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC;IAE1D,OAAO,CACL,8BACE,eAAM,SAAS,EAAC,YAAY,6BAAiB,EAC7C,eAAK,SAAS,EAAC,YAAY,aACzB,eAAM,SAAS,EAAC,YAAY,YAAE,IAAI,GAAQ,EAC1C,eAAM,SAAS,EAAC,YAAY,YAAE,GAAG,IAAI,KAAK,GAAQ,IAC9C,IACL,CACJ,CAAC;AACJ,CAAC;AAED,uBAAuB;AAEvB,SAAS,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAsD;IAC1F,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAErD,OAAO,CACL,eAAK,SAAS,EAAC,WAAW,aAExB,eAAK,SAAS,EAAC,yBAAyB,aACtC,eAAM,SAAS,EAAC,+BAA+B,oBAAW,EAC1D,eAAM,SAAS,EAAC,gCAAgC,YAAE,MAAM,GAAQ,EAE/D,QAAQ,IAAI,CACX,iBACE,SAAS,EAAC,6FAA6F,EACvG,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,sBAGxB,CACV,EAED,iBACE,SAAS,EAAC,6FAA6F,EACvG,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,YAEpC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,GAC3B,IACL,EAGL,QAAQ,IAAI,CACX,cAAK,SAAS,EAAC,8CAA8C,YAC1D,UAAU,CAAC,CAAC,CAAC,CACZ,eAAK,SAAS,EAAC,WAAW,aACxB,eAAK,SAAS,EAAC,4DAA4D,aACzE,eAAM,SAAS,EAAC,WAAW,YAAE,UAAU,CAAC,KAAK,GAAQ,EACrD,yBAAO,UAAU,CAAC,KAAK,GAAQ,IAC3B,EACN,KAAC,MAAM,IAAC,KAAK,EAAE,UAAU,GAAI,IACzB,CACP,CAAC,CAAC,CAAC,CACF,cAAK,SAAS,EAAC,+BAA+B,2BAAiB,CAChE,GACG,CACP,IACG,CACP,CAAC;AACJ,CAAC;AAED,qBAAqB;AAErB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,WAAkB,CAAC,CAAC;AAC7C,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,WAAkB,CAAC,CAAC"}
+{"version":3,"file":"ref-view.js","sourceRoot":"","sources":["../../../src/mods/treenity/ref-view.tsx"],"names":[],"mappings":";AAAA,8EAA8E;AAE9E,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAiB,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjC,gEAAgE;AAEhE,SAAS,WAAW,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAuD;IAC3F,MAAM,GAAG,GAAI,KAAa,CAAC,IAA0B,CAAC;IACtD,IAAI,CAAC,GAAG;QAAE,OAAO,cAAK,SAAS,EAAC,+BAA+B,sCAA4B,CAAC;IAE5F,OAAO,KAAC,UAAU,IAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,GAAI,CAAC;AACzD,CAAC;AAED,oDAAoD;AAEpD,SAAS,WAAW,CAAC,EAAE,KAAK,EAAuB;IACjD,MAAM,GAAG,GAAI,KAAa,CAAC,IAA0B,CAAC;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC;IAE1D,OAAO,CACL,8BACE,eAAM,SAAS,EAAC,YAAY,6BAAiB,EAC7C,eAAK,SAAS,EAAC,YAAY,aACzB,eAAM,SAAS,EAAC,YAAY,YAAE,IAAI,GAAQ,EAC1C,eAAM,SAAS,EAAC,YAAY,YAAE,GAAG,IAAI,KAAK,GAAQ,IAC9C,IACL,CACJ,CAAC;AACJ,CAAC;AAED,uBAAuB;AAEvB,SAAS,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAsD;IAC1F,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAErD,OAAO,CACL,eAAK,SAAS,EAAC,WAAW,aAExB,eAAK,SAAS,EAAC,yBAAyB,aACtC,eAAM,SAAS,EAAC,+BAA+B,oBAAW,EAC1D,eAAM,SAAS,EAAC,gCAAgC,YAAE,MAAM,GAAQ,EAE/D,QAAQ,IAAI,CACX,KAAC,MAAM,IACL,OAAO,EAAC,SAAS,EACjB,IAAI,EAAC,IAAI,EACT,SAAS,EAAC,4BAA4B,EACtC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,sBAGxB,CACV,EAED,KAAC,MAAM,IACL,OAAO,EAAC,SAAS,EACjB,IAAI,EAAC,IAAI,EACT,SAAS,EAAC,4BAA4B,EACtC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,YAEpC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,GAC3B,IACL,EAGL,QAAQ,IAAI,CACX,cAAK,SAAS,EAAC,8CAA8C,YAC1D,UAAU,CAAC,CAAC,CAAC,CACZ,eAAK,SAAS,EAAC,WAAW,aACxB,eAAK,SAAS,EAAC,4DAA4D,aACzE,eAAM,SAAS,EAAC,WAAW,YAAE,UAAU,CAAC,KAAK,GAAQ,EACrD,yBAAO,UAAU,CAAC,KAAK,GAAQ,IAC3B,EACN,KAAC,MAAM,IAAC,KAAK,EAAE,UAAU,GAAI,IACzB,CACP,CAAC,CAAC,CAAC,CACF,cAAK,SAAS,EAAC,+BAA+B,2BAAiB,CAChE,GACG,CACP,IACG,CACP,CAAC;AACJ,CAAC;AAED,qBAAqB;AAErB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,WAAkB,CAAC,CAAC;AAC7C,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,WAAkB,CAAC,CAAC"}

package/dist/mods/treenity/seed.js

@@ -1,8 +1,8 @@
-import { R, S } from '@treenity/core';
+import { A, R, S, W } from '@treenity/core';
 import { registerPrefab } from '@treenity/core/mod';
 registerPrefab('core', 'seed', [
     { $path: 'sys', $type: 'treenity.system' },
-    { $path: 'auth', $type: 'dir' },
+    { $path: 'auth', $type: 'dir', $acl: [{ g: 'admins', p: R | W | A | S }, { g: 'public', p: 0 }] },
     { $path: 'auth/users', $type: 'mount-point',
         connection: { $type: 'connection', db: 'treenity', collection: 'users' },
         mount: { $type: 't.mount.mongo' },
@@ -19,6 +19,7 @@ registerPrefab('core', 'seed', [
     { $path: 'auth/sessions', $type: 'mount-point',
         connection: { $type: 'connection', db: 'treenity', collection: 'sessions' },
         mount: { $type: 't.mount.mongo' },
+        $acl: [{ g: 'admins', p: R | W | A | S }, { g: 'authenticated', p: 0 }, { g: 'public', p: 0 }],
     },
     { $path: 'mnt', $type: 'dir' },
     { $path: 'mnt/orders', $type: 't.mount.mongo',

package/dist/mods/treenity/seed.js.map

@@ -1 +1 @@
-{"version":3,"file":"seed.js","sourceRoot":"","sources":["../../../src/mods/treenity/seed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,CAAC,EAAE,CAAC,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE;IAC7B,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC1C,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE;IAC/B,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa;QACzC,UAAU,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE;QACxE,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;QACjC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;KAChE;IACD,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa;QACxC,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;QACjC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;KAC9B;IACD,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa;QACvC,KAAK,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE;QAChC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;KAC9B;IACD,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa;QAC5C,UAAU,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE;QAC3E,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;KAClC;IACD,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE;IAC9B,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe;QAC3C,UAAU,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE;KAC1E;IACD,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE;IACnC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;QAC3B,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,qBAAqB,EAAE;QACvF,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;QAC3C,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;KACxC;IACD,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE;IAChC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE;IAClD,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,sBAAsB;QACpD,KAAK,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE;KACnC;IACD,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,eAAe,EAAE;IACtD,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa;QACnC,KAAK,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE;QAClC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;KAC9B;IACD,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE;IAC9C,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;IAC/D,EAAE,KAAK,EAAE,8BAA8B,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACnF,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE;CAC3D,EAAE,CAAC,KAAK,EAAE,EAAE;IACzB,oBAAoB;IACpB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACrD,IAAI,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CACzB,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CACpD,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC"}
+{"version":3,"file":"seed.js","sourceRoot":"","sources":["../../../src/mods/treenity/seed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE;IAC7B,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC1C,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;IACjG,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa;QACzC,UAAU,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE;QACxE,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;QACjC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;KAChE;IACD,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa;QACxC,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;QACjC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;KAC9B;IACD,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa;QACvC,KAAK,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE;QAChC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;KAC9B;IACD,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa;QAC5C,UAAU,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE;QAC3E,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;QACjC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;KAC/F;IACD,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE;IAC9B,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe;QAC3C,UAAU,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE;KAC1E;IACD,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE;IACnC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;QAC3B,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,qBAAqB,EAAE;QACvF,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;QAC3C,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;KACxC;IACD,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE;IAChC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE;IAClD,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,sBAAsB;QACpD,KAAK,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE;KACnC;IACD,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,eAAe,EAAE;IACtD,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa;QACnC,KAAK,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE;QAClC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;KAC9B;IACD,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE;IAC9C,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;IAC/D,EAAE,KAAK,EAAE,8BAA8B,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACnF,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE;CAC3D,EAAE,CAAC,KAAK,EAAE,EAAE;IACzB,oBAAoB;IACpB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACrD,IAAI,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CACzB,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CACpD,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC"}

package/dist/symbols.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"symbols.d.ts","sourceRoot":"","sources":["../src/symbols.ts"],"names":[],"mappings":"AAGA,OAAO,EAAe,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE5D,eAAO,MAAM,IAAI,eAA8B,CAAC;AAChD,eAAO,MAAM,KAAK,eAA+B,CAAC;AAElD,wBAAgB,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAS9C"}
+{"version":3,"file":"symbols.d.ts","sourceRoot":"","sources":["../src/symbols.ts"],"names":[],"mappings":"AAIA,OAAO,EAAe,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE5D,eAAO,MAAM,IAAI,eAA8B,CAAC;AAChD,eAAO,MAAM,KAAK,eAA+B,CAAC;AAMlD,wBAAgB,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAW9C"}

package/dist/symbols.js

@@ -1,16 +1,22 @@
 // Symbol-based component location metadata.
-// Stamped on deserialization (cache.put). Survive spread, invisible to JSON/keys/entries.
+// Stamped on deserialization (cache.put). Non-enumerable so they're
+// invisible to structuredClone, spread, and JSON/keys/entries.
 import { isComponent } from '@treenity/core';
 export const $key = Symbol.for('treenity.$key');
 export const $node = Symbol.for('treenity.$node');
+function hide(obj, sym, value) {
+    Object.defineProperty(obj, sym, { value, enumerable: false, writable: false, configurable: true });
+}
 export function stampNode(node) {
-    node[$key] = '';
-    node[$node] = node;
+    if (node[$node] === node)
+        return;
+    hide(node, $key, '');
+    hide(node, $node, node);
     for (const [k, v] of Object.entries(node)) {
         if (k.startsWith('$') || !isComponent(v))
             continue;
-        v[$key] = k;
-        v[$node] = node;
+        hide(v, $key, k);
+        hide(v, $node, node);
     }
 }
 //# sourceMappingURL=symbols.js.map

package/dist/symbols.js.map

@@ -1 +1 @@
-{"version":3,"file":"symbols.js","sourceRoot":"","sources":["../src/symbols.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,0FAA0F;AAE1F,OAAO,EAAE,WAAW,EAAiB,MAAM,gBAAgB,CAAC;AAE5D,MAAM,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAElD,MAAM,UAAU,SAAS,CAAC,IAAc;IACrC,IAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACxB,IAAY,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAE5B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YAAE,SAAS;QAClD,CAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC3B,CAAC;AACH,CAAC"}
+{"version":3,"file":"symbols.js","sourceRoot":"","sources":["../src/symbols.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,oEAAoE;AACpE,+DAA+D;AAE/D,OAAO,EAAE,WAAW,EAAiB,MAAM,gBAAgB,CAAC;AAE5D,MAAM,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAElD,SAAS,IAAI,CAAC,GAAW,EAAE,GAAW,EAAE,KAAc;IACpD,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,IAAK,IAAY,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,OAAO;IAE1C,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACrB,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAExB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YAAE,SAAS;QACnD,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@treenity/react",
-  "version": "3.0.1",
+  "version": "3.0.2",
   "description": "React binding for Treenity — reactive hooks, admin UI, and context-based component rendering.",
   "type": "module",
   "publishConfig": {
     "access": "public"
   },
-  "license": "AGPL-3.0",
+  "license": "FSL-1.1-MIT",
   "author": "Treenity <hello@treenity.ai> (https://treenity.ai)",
   "homepage": "https://github.com/treenity-ai/treenity",
   "repository": {
@@ -73,6 +73,8 @@
   "files": [
     "dist",
     "src",
+    "!src/**/*.test.ts",
+    "!src/**/*.test.tsx",
     "LICENSE",
     "README.md"
   ],

package/src/App.tsx

@@ -17,7 +17,7 @@ import { useCallback, useEffect, useRef, useState, useSyncExternalStore } from '
 import { toast } from 'sonner';
 import * as cache from './cache';
 import { tree } from './client';
-import { startEvents, stopEvents } from './events';
+import { SSE_CONNECTED, SSE_DISCONNECTED, startEvents, stopEvents } from './events';
 import { NavigateProvider } from './hooks';
 import { Inspector } from './Inspector';
 import { LoginModal, LoginScreen } from './Login';
@@ -109,6 +109,29 @@ export function App() {
   const [filter, setFilter] = useState('');
   const [showHidden, setShowHidden] = useState(false);
   const [toastMsg, setToastMsg] = useState<{ text: string; type: 'success' | 'error' } | null>(null);
+  const [sseDown, setSseDown] = useState(false);
+  const sseDownTimer = useRef<ReturnType<typeof setTimeout>>(undefined);
+
+  // TODO: remove debounce, extract from App code, remove debounce
+  // SSE connection indicator — debounce disconnect by 2s to avoid flicker
+  useEffect(() => {
+    const onConnect = () => {
+      if (sseDownTimer.current) { clearTimeout(sseDownTimer.current); sseDownTimer.current = undefined; }
+      setSseDown(false);
+    };
+    const onDisconnect = () => {
+      if (!sseDownTimer.current) {
+        sseDownTimer.current = setTimeout(() => { sseDownTimer.current = undefined; setSseDown(true); }, 2000);
+      }
+    };
+    window.addEventListener(SSE_CONNECTED, onConnect);
+    window.addEventListener(SSE_DISCONNECTED, onDisconnect);
+    return () => {
+      window.removeEventListener(SSE_CONNECTED, onConnect);
+      window.removeEventListener(SSE_DISCONNECTED, onDisconnect);
+      if (sseDownTimer.current) clearTimeout(sseDownTimer.current);
+    };
+  }, []);
 
   // Granular: only re-render App when root node appears/disappears
   const hasRootNode = useSyncExternalStore(
@@ -438,6 +461,11 @@ export function App() {
 
   return (
     <NavigateProvider value={navigate}>
+    {sseDown && (
+      <div className="fixed top-0 inset-x-0 z-50 bg-yellow-500 text-black text-center text-sm py-1">
+        Reconnecting to server…
+      </div>
+    )}
     <div className="flex h-screen bg-background text-foreground overflow-hidden">
       <ResizablePanelGroup orientation="horizontal" className="h-full">
         <ResizablePanel

package/src/ComponentSection.tsx

@@ -59,7 +59,7 @@ export function ComponentSection({
   toast,
   onActionComplete,
 }: ComponentSectionProps) {
-  const isMain = !onToggle;
+  const isMain = !name;
 
   return (
     <div className="border-t border-border mt-2 pt-0.5 first:border-t-0 first:mt-0 first:pt-0">

package/src/ErrorBoundary.tsx

@@ -1,3 +1,4 @@
+import { Button } from '#components/ui/button';
 import { Component, type ReactNode } from 'react';
 
 type Props = {
@@ -10,12 +11,14 @@ type State = { error: string | null };
 const defaultFallback = (error: string, reset: () => void) => (
   <div className="rounded border border-destructive/30 bg-destructive/5 p-2 text-[11px]">
     <div className="text-destructive font-mono break-all">{error}</div>
-    <button
-      className="mt-1 text-[10px] text-muted-foreground hover:text-foreground underline"
+    <Button
+      variant="link"
+      size="sm"
+      className="mt-1 h-auto p-0 text-[10px] text-muted-foreground hover:text-foreground underline"
       onClick={reset}
     >
       Retry
-    </button>
+    </Button>
   </div>
 );
 

package/src/cache.ts

@@ -6,6 +6,10 @@ import type { NodeData } from '@treenity/core';
 import * as idb from './idb';
 import { stampNode } from './symbols';
 
+/** Shallow-freeze in dev mode to catch accidental cache mutation at the source */
+const devFreeze: (node: NodeData) => void =
+  import.meta.env?.DEV ? (node) => Object.freeze(node) : () => {};
+
 type Sub = () => void;
 
 const nodes = new Map<string, NodeData>();
@@ -112,6 +116,7 @@ export function removeFromParent(path: string, parent: string) {
 export function put(node: NodeData, virtualParent?: string) {
   stampNode(node);
   nodes.set(node.$path, node);
+  devFreeze(node);
   const p = virtualParent ?? parentOf(node.$path);
   if (p !== null) {
     if (!parentIndex.has(p)) parentIndex.set(p, new Set());
@@ -139,6 +144,7 @@ export function putMany(items: NodeData[], virtualParent?: string) {
   for (const n of items) {
     stampNode(n);
     nodes.set(n.$path, n);
+    devFreeze(n);
     lastUpdated.set(n.$path, ts);
     fire(pathSubs, n.$path);
     const p = virtualParent ?? parentOf(n.$path);
@@ -230,6 +236,7 @@ export async function hydrate(): Promise<void> {
     for (const { data, lastUpdated: ts, virtualParent } of entries) {
       stampNode(data);
       nodes.set(data.$path, data);
+      devFreeze(data);
       lastUpdated.set(data.$path, ts);
       const p = virtualParent ?? parentOf(data.$path);
       if (p !== null) {

package/src/client-tree.ts

@@ -2,13 +2,13 @@
 // FilterTree: /local/* → memory+mounts, everything else → remote.
 // Reads merge both — /local visible alongside server nodes.
 
-import type { NodeData } from '@treenity/core'
-import { createFilterTree, createMemoryTree } from '@treenity/core/tree'
-import { withCache } from '@treenity/core/tree/cache'
-import { withMounts } from '@treenity/core/server/mount'
-import './fiber-tree' // registers t.mount.react
-import { createRemoteTree } from './remote-tree'
-import type { trpc } from './trpc'
+import type { NodeData } from '@treenity/core';
+import { withMounts } from '@treenity/core/server/mount';
+import './fiber-tree'; // registers t.mount.react
+import { createFilterTree, createMemoryTree } from '@treenity/core/tree';
+import { withCache } from '@treenity/core/tree/cache';
+import { createRemoteTree } from './remote-tree';
+import type { trpc } from './trpc';
 
 type TrpcClient = typeof trpc
 

package/src/components/ui/button.tsx

@@ -1,8 +1,7 @@
-import * as React from "react"
-import { cva, type VariantProps } from "class-variance-authority"
-import { Slot } from "radix-ui"
-
-import { cn } from "#components/lib/utils"
+import { cn } from '#components/lib/utils';
+import { cva, type VariantProps } from 'class-variance-authority';
+import { Slot } from 'radix-ui';
+import * as React from 'react';
 
 const buttonVariants = cva(
   "inline-flex shrink-0 items-center justify-center gap-2 rounded-md text-sm font-medium whitespace-nowrap transition-all outline-none focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:pointer-events-none disabled:opacity-50 aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",

package/src/components/ui/pagination.tsx

@@ -1,12 +1,7 @@
-import * as React from "react"
-import {
-  ChevronLeftIcon,
-  ChevronRightIcon,
-  MoreHorizontalIcon,
-} from "lucide-react"
-
-import { cn } from "#components/lib/utils"
-import { buttonVariants, type Button } from "#components/ui/button"
+import { cn } from '#components/lib/utils';
+import { type Button, buttonVariants } from '#components/ui/button';
+import { ChevronLeftIcon, ChevronRightIcon, MoreHorizontalIcon } from 'lucide-react';
+import * as React from 'react';
 
 function Pagination({ className, ...props }: React.ComponentProps<"nav">) {
   return (

package/src/components/ui/textarea.tsx

@@ -6,7 +6,7 @@ function Textarea({ className, ...props }: React.ComponentProps<"textarea">) {
     <textarea
       data-slot="textarea"
       className={cn(
-        "border-input placeholder:text-muted-foreground focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:bg-input/30 flex field-sizing-content min-h-16 w-full rounded-md border bg-transparent px-3 py-2 text-base shadow-xs transition-[color,box-shadow] outline-none focus-visible:ring-[3px] disabled:cursor-not-allowed disabled:opacity-50 md:text-sm",
+        "border-input placeholder:text-muted-foreground focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:bg-input/30 flex field-sizing-content min-h-16 max-h-64 overflow-y-auto w-full rounded-md border bg-transparent px-3 py-2 text-base shadow-xs transition-[color,box-shadow] outline-none focus-visible:ring-[3px] disabled:cursor-not-allowed disabled:opacity-50 md:text-sm",
         className
       )}
       {...props}

package/src/events.ts

@@ -14,14 +14,44 @@ interface EventsConfig {
   getSelected: () => string | null;
 }
 
+// ── SSE connection events (consumed by App.tsx) ──
+
+export const SSE_CONNECTED = 'sse-connected';
+export const SSE_DISCONNECTED = 'sse-disconnected';
+
 let unsub: (() => void) | null = null;
+let reconnectTimer: ReturnType<typeof setTimeout> | null = null;
+let lastConfig: EventsConfig | null = null;
 
 export function startEvents(config: EventsConfig) {
   stopEvents();
+  lastConfig = config;
 
   const { loadChildren, getExpanded, getSelected } = config;
 
   const sub = trpc.events.subscribe(undefined as void, {
+    onStarted() {
+      window.dispatchEvent(new Event(SSE_CONNECTED));
+    },
+    onConnectionStateChange(state: { state: string }) {
+      if (state.state === 'connecting') {
+        window.dispatchEvent(new Event(SSE_DISCONNECTED));
+      } else if (state.state === 'pending') {
+        // 'pending' = connected and waiting for data — SSE is alive
+        window.dispatchEvent(new Event(SSE_CONNECTED));
+      }
+    },
+    onError(err: unknown) {
+      console.error('[sse] subscription error (non-retryable):', err);
+      window.dispatchEvent(new Event(SSE_DISCONNECTED));
+      // tRPC exhausted retries — schedule a single delayed re-subscribe
+      scheduleResubscribe();
+    },
+    onStopped() {
+      // Server closed the stream — schedule re-subscribe
+      window.dispatchEvent(new Event(SSE_DISCONNECTED));
+      scheduleResubscribe();
+    },
     onData(event) {
       if (event.type === 'reconnect') {
         if (!event.preserved) {
@@ -45,8 +75,9 @@ export function startEvents(config: EventsConfig) {
         const existing = cache.get(event.path);
         if (existing && event.patches) {
           try {
-            applyPatch(existing, event.patches as Operation[]);
-            cache.put(existing);
+            const patched = structuredClone(existing);
+            applyPatch(patched, event.patches as Operation[]);
+            cache.put(patched);
           } catch (e) {
             console.error('Failed to apply patches, fetching full node:', e);
             trpc.get.query({ path: event.path }).then((n) => {
@@ -73,9 +104,18 @@ export function startEvents(config: EventsConfig) {
   unsub = () => sub.unsubscribe();
 }
 
+const RESUBSCRIBE_DELAY = 5_000;
+
+function scheduleResubscribe() {
+  if (reconnectTimer || !lastConfig) return;
+  console.log(`[sse] will re-subscribe in ${RESUBSCRIBE_DELAY}ms`);
+  reconnectTimer = setTimeout(() => {
+    reconnectTimer = null;
+    if (lastConfig) startEvents(lastConfig);
+  }, RESUBSCRIBE_DELAY);
+}
+
 export function stopEvents() {
-  if (unsub) {
-    unsub();
-    unsub = null;
-  }
+  if (reconnectTimer) { clearTimeout(reconnectTimer); reconnectTimer = null; }
+  if (unsub) { unsub(); unsub = null; }
 }

package/src/fiber-tree.ts

@@ -2,9 +2,9 @@
 // Walks the live Fiber tree on each query — no state, no tracking.
 // Registered as t.mount.react — isomorphic mount, same as server-side mounts.
 
-import type { NodeData } from '@treenity/core'
-import { register } from '@treenity/core'
-import type { Tree } from '@treenity/core/tree'
+import type { NodeData } from '@treenity/core';
+import { register } from '@treenity/core';
+import type { Tree } from '@treenity/core/tree';
 
 const PREFIX = '/local/react'
 

package/src/hooks.ts

@@ -99,7 +99,10 @@ export function useChildren(parentPath: string, opts?: WatchOpts) {
 
     trpc.getChildren
       .query({ path: parentPath, limit: opts?.limit, watch: opts?.watch, watchNew: opts?.watchNew })
-      .then((result: any) => cache.putMany(result.items as NodeData[], parentPath));
+      .then((result: any) => {
+        if (result.truncated) console.warn(`[tree] Children of ${parentPath} truncated — results may be incomplete`);
+        cache.putMany(result.items as NodeData[], parentPath);
+      });
   }, [parentPath, gen, opts?.limit, opts?.watch, opts?.watchNew]);
 
   return useSyncExternalStore(
@@ -111,10 +114,17 @@ export function useChildren(parentPath: string, opts?: WatchOpts) {
 // ── set: optimistic update + server persist ──
 
 export async function set(next: NodeData) {
+  const prev = cache.get(next.$path);
   cache.put(next);
-  await tree.set(next);
-  const fresh = await tree.get(next.$path);
-  if (fresh) cache.put(fresh);
+  try {
+    await tree.set(next);
+    const fresh = await tree.get(next.$path);
+    if (fresh) cache.put(fresh);
+  } catch (err) {
+    // F15: rollback optimistic cache on server reject (validation, ACL, OCC)
+    if (prev) cache.put(prev); else cache.remove(next.$path);
+    throw err;
+  }
 }
 
 // ── execute: action caller ──
@@ -168,6 +178,65 @@ export function useCanWrite(path: string | null): boolean {
   return (perm & W) !== 0;
 }
 
+// ── useAutoSave: throttled auto-persist for editable views ──
+// First save fires after 500ms (responsive), subsequent saves throttled to 2s.
+// Returns [localData, setField, dirty] — local updates are instant, server writes are batched.
+
+// TODO: check why unused
+export function useAutoSave(node: NodeData) {
+  const [local, setLocal] = useState<Record<string, unknown>>({});
+  const dirtyRef = useRef(false);
+  const timerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
+  const savingRef = useRef(false);
+  const pendingRef = useRef(false);
+  const lastSaveRef = useRef(0);
+  const nodeRef = useRef(node);
+  nodeRef.current = node;
+
+  const flush = useCallback(async () => {
+    if (savingRef.current) { pendingRef.current = true; return; }
+    if (!dirtyRef.current) return;
+    savingRef.current = true;
+    try {
+      const merged = { ...nodeRef.current, ...local };
+      delete merged.$rev; // skip OCC — force-write
+      await set(merged);
+      dirtyRef.current = false;
+      lastSaveRef.current = Date.now();
+    } catch (e) {
+      console.error('[autoSave] failed:', e);
+    } finally {
+      savingRef.current = false;
+      if (pendingRef.current) {
+        pendingRef.current = false;
+        flush();
+      }
+    }
+  }, [local]);
+
+  const setField = useCallback((field: string, value: unknown) => {
+    setLocal(prev => ({ ...prev, [field]: value }));
+    dirtyRef.current = true;
+
+    if (timerRef.current) clearTimeout(timerRef.current);
+    const elapsed = Date.now() - lastSaveRef.current;
+    const delay = elapsed > 2000 ? 500 : 2000; // first batch fast, then throttle
+    timerRef.current = setTimeout(() => { timerRef.current = null; flush(); }, delay);
+  }, [flush]);
+
+  // Flush on unmount
+  useEffect(() => () => {
+    if (timerRef.current) { clearTimeout(timerRef.current); flush(); }
+  }, [flush]);
+
+  // Reset local on node path change
+  useEffect(() => { setLocal({}); dirtyRef.current = false; }, [node.$path]);
+
+  const merged = useMemo(() => ({ ...node, ...local }), [node, local]);
+
+  return [merged, setField, dirtyRef.current] as const;
+}
+
 // ── Internals ──
 
 const AsyncGenFn = Object.getPrototypeOf(async function* () { }).constructor;

package/src/lib/minimd.ts

@@ -1,6 +1,7 @@
 // Minimal markdown → HTML for chat bubbles (~50 lines)
 // Covers: headers, bold, italic, inline code, code blocks, links, lists, blockquotes, hr
 import './minimd.css';
+import { sanitizeHref } from './sanitize-href';
 
 const esc = (s: string) => s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
 
@@ -11,7 +12,12 @@ function inline(s: string): string {
     .replace(/__(.+?)__/g, '<strong>$1</strong>')
     .replace(/\*(.+?)\*/g, '<em>$1</em>')
     .replace(/_(.+?)_/g, '<em>$1</em>')
-    .replace(/\[([^\]]+)\]\(([^)]+)\)/g, '<a href="$2" target="_blank" rel="noopener">$1</a>');
+    .replace(/\[([^\]]+)\]\(([^)]+)\)/g, (_, text, url) => {
+      const safe = sanitizeHref(url);
+      if (!safe) return text;
+      const safeUrl = safe.replace(/"/g, '&quot;');
+      return `<a href="${safeUrl}" target="_blank" rel="noopener">${text}</a>`;
+    });
 }
 
 export function minimd(src: string): string {

package/src/lib/sanitize-href.ts

@@ -0,0 +1,13 @@
+// Allowlist-based href sanitizer — blocks javascript:, data:, vbscript:, etc.
+// Strips control characters before protocol check to defeat browser bypass vectors
+// (e.g. "java\tscript:" → browsers collapse to "javascript:")
+
+const SAFE_PROTOCOL = /^(https?:|mailto:|tel:|\/|#)/i;
+
+/** Returns sanitized URL string, or null if the protocol is unsafe. */
+export function sanitizeHref(url: string): string | null {
+  const trimmed = url.replace(/[\x00-\x20]+/g, '');
+  if (!trimmed) return null;
+  if (SAFE_PROTOCOL.test(trimmed)) return url.trim();
+  return null;
+}

package/src/main.tsx

@@ -1,7 +1,7 @@
 import 'reflect-metadata';
 import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
 import { enablePatches } from 'immer';
-import { StrictMode } from 'react';
+import { StrictMode, type ReactNode } from 'react';
 import { createRoot } from 'react-dom/client';
 import { App } from './App';
 import './load-client';
@@ -12,13 +12,21 @@ enablePatches();
 
 const queryClient = new QueryClient();
 
+// StrictMode off: FlowGram inversify container breaks on double-mount
+// https://github.com/bytedance/flowgram.ai/issues/402
+// TODO: re-enable once FlowGram fixes React 19 StrictMode support
+// const Strict = import.meta.env.VITE_STRICT_MODE !== 'false'
+//   ? StrictMode
+//   : ({ children }: { children: ReactNode }) => children;
+const Strict = ({ children }: { children: ReactNode }) => children;
+
 const root = document.getElementById('root');
 if (!root) throw new Error('No #root element');
 createRoot(root).render(
-  <StrictMode>
+  <Strict>
     <QueryClientProvider client={queryClient}>
       <App />
       <Toaster />
     </QueryClientProvider>
-  </StrictMode>,
+  </Strict>,
 );

package/src/mods/editor-ui/FieldLabel.tsx

@@ -8,6 +8,7 @@ import {
   DropdownMenuSeparator,
   DropdownMenuTrigger,
 } from '#components/ui/dropdown-menu';
+import { Input } from '#components/ui/input';
 import { isRef } from '@treenity/core';
 import { useState } from 'react';
 
@@ -101,8 +102,8 @@ export function RefEditor({ value, onChange }: {
     <div className="flex flex-col gap-1 flex-1 min-w-0">
       <div className="flex items-center gap-1">
         <span className="text-[9px] text-muted-foreground shrink-0 w-5">$ref</span>
-        <input
-          className="flex-1 min-w-0"
+        <Input
+          className="h-7 text-xs flex-1 min-w-0"
           value={value.$ref}
           onChange={(e) => onChange(hasMap ? { $ref: e.target.value, $map: value.$map } : { $ref: e.target.value })}
           placeholder="path"
@@ -111,8 +112,8 @@ export function RefEditor({ value, onChange }: {
       {hasMap && (
         <div className="flex items-center gap-1">
           <span className="text-[9px] text-muted-foreground shrink-0 w-5">$map</span>
-          <input
-            className="flex-1 min-w-0"
+          <Input
+            className="h-7 text-xs flex-1 min-w-0"
             value={value.$map ?? ''}
             onChange={(e) => onChange({ $ref: value.$ref, $map: e.target.value })}
             placeholder="field"