@uniweb/api 0.2.10 → 0.2.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniweb/api",
-  "version": "0.2.10",
+  "version": "0.2.12",
   "description": "The client for a Uniweb site's own backend — session, records, entities — imported by a foundation the way it imports @uniweb/kit.",
   "type": "module",
   "exports": {
@@ -34,7 +34,7 @@
     "node": ">=20.19"
   },
   "dependencies": {
-    "@uniweb/core": "^0.24.0"
+    "@uniweb/core": "^0.24.2"
   },
   "peerDependencies": {
     "react": "^19.0.0"

package/src/client.js

@@ -12,7 +12,7 @@
  */
 
 import { getUniweb, deriveCacheKey } from '@uniweb/core'
-import { resolveService } from '@uniweb/core/services'
+import { resolveService } from '@uniweb/core'
 import { ApiError } from './errors.js'
 import { composeUrl, isCrossOrigin, readBody, UNSAFE } from './http.js'
 import { AUTH, ROUTES, PARAM, FIELD, LIST, OP } from './wire.js'
@@ -363,7 +363,22 @@ export class ApiClient {
    * @returns {string}
    */
   cacheKey(spec) {
-    return deriveCacheKey({ ...spec, endpoint: `api:${this.viewerId}:${spec.endpoint ?? ''}` })
+    // ⛔ core's `deriveCacheKey` hashes a FIXED field set, and that set has
+    // drifted twice under this call: `schema` was renamed to `as` (2026-09-02),
+    // and `endpoint` was dropped by core 0.24 — so spreading the spec meant the
+    // qualifiers (`schema`, `scope`, `limit`, `offset`, `all`, `via`) fell out
+    // of the hash and every list a viewer read collided on `/entities`; under a
+    // 0.24 core EVERY key of this package degenerated to '{}'.
+    // ⇒ Compose the WHOLE identity into `url` — hashed by every core version —
+    // so this package's keys cannot drift with core's field selection again.
+    // Keys change once; the store is in-memory and repopulates.
+    const { endpoint = '', ...qualifiers } = spec ?? {}
+    const suffix = Object.keys(qualifiers)
+      .filter((k) => qualifiers[k] !== undefined)
+      .sort()
+      .map((k) => `${k}=${qualifiers[k]}`)
+      .join('&')
+    return deriveCacheKey({ url: `api:${this.viewerId}:${endpoint}${suffix ? `?${suffix}` : ''}` })
   }
 
   /**