aimeat 2.1.0 → 2.3.0

package/dist/static/app-catalog/js/workcopy.js

@@ -0,0 +1,198 @@
+/**
+ * @file workcopy.js
+ * @description The working-copy model behind the app-catalog edit loop. ONE persistent working copy
+ *   per app — the server draft slot (PUT /v1/apps/:owner/:file/draft, TARGET-030) — plus a rolling
+ *   history of CHECKPOINTS: the bytes each save replaced, kept as per-owner memory records via the
+ *   generic /v1/memory API. Before this module the catalog's "Save" only overwrote a transient
+ *   in-memory blob (db.js is server-only, no browser persistence): it survived neither a reload nor
+ *   the next save, which is exactly why editing felt like editing the same version forever. Saving
+ *   now (a) checkpoints the previous bytes and (b) persists the new bytes server-side, so nothing is
+ *   lost, the work can be tested on a real origin, and publishing stays the separate, deliberate step.
+ * @structure
+ *   - slugFor(owner, filename)             → memory-key slug for one app
+ *   - loadCheckpoints / getCheckpoints     → the app's checkpoint index (newest first)
+ *   - saveWorkingCopy({...})               → checkpoint the replaced bytes + PUT the server draft
+ *   - readCheckpoint / deleteCheckpoint    → restore or prune one checkpoint
+ *   - discardWorkingCopy                   → drop the server draft slot
+ * @usage import { saveWorkingCopy, loadCheckpoints, getCheckpoints, readCheckpoint } from './workcopy.js'
+ * @version-history
+ *   v1.0.0 — 2026-07-25 — Initial (TARGET-048): persistent working copy + checkpoint history, so
+ *     local edits stop vanishing and "saved" stops meaning "kept only until you reload".
+ */
+import { loadConfig } from './config.js';
+import { getCortexOwnerToken } from './cortex.js';
+
+// How many checkpoints to keep per app. Each checkpoint is a full HTML snapshot in its OWN memory
+// record (the node caps a single memory value at ~1 MB, so they must not share one document), and
+// they count against the owner's memory quota — hence a small rolling window, oldest pruned first.
+const MAX_CHECKPOINTS = 8;
+const PREFIX = 'app-catalog.wc';
+
+// slug -> checkpoint index array (newest first). Mirrors the server doc so the detail view can
+// render synchronously between loads.
+let cache = {};
+
+function base() { return (loadConfig().aimeatUrl || '').replace(/\/+$/, ''); }
+function tok() { return getCortexOwnerToken(); }
+
+/** Stable, key-safe slug for one app's checkpoint records. */
+export function slugFor(owner, filename) {
+  return (String(owner || '') + '-' + String(filename || ''))
+    .replace(/[^a-zA-Z0-9]+/g, '-')
+    .replace(/^-+|-+$/g, '')
+    .toLowerCase()
+    .slice(0, 80);
+}
+function indexKey(slug) { return PREFIX + '.' + slug; }
+function bodyKey(slug, id) { return PREFIX + '.' + slug + '.b' + id; }
+
+function memGet(key) {
+  var b = base(), token = tok();
+  if (!b || !token) return Promise.resolve(null);
+  return fetch(b + '/v1/memory/' + encodeURIComponent(key), { headers: { 'Authorization': 'Bearer ' + token } })
+    .then(function (r) { return r.ok ? r.json() : null; })
+    .then(function (j) { return (j && j.data && j.data.value) || null; })
+    .catch(function () { return null; });
+}
+
+function memPut(key, value) {
+  var b = base(), token = tok();
+  if (!b || !token) return Promise.reject(new Error('not signed in'));
+  return fetch(b + '/v1/memory', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json', 'Authorization': 'Bearer ' + token },
+    body: JSON.stringify({ key: key, value: value, visibility: 'private' }),
+  }).then(function (r) {
+    return r.json().then(function (j) {
+      if (!r.ok || (j && j.ok === false)) throw new Error((j && j.error && j.error.message) || ('HTTP ' + r.status));
+      return j;
+    });
+  });
+}
+
+// Best-effort: a failed prune only leaves an orphan body record the index no longer points at.
+function memDelete(key) {
+  var b = base(), token = tok();
+  if (!b || !token) return Promise.resolve();
+  return fetch(b + '/v1/memory/' + encodeURIComponent(key), {
+    method: 'DELETE',
+    headers: { 'Authorization': 'Bearer ' + token },
+  }).catch(function () { /* orphan record is harmless */ });
+}
+
+/** The cached checkpoint index for an app (newest first). Empty until loadCheckpoints resolves. */
+export function getCheckpoints(owner, filename) {
+  return cache[slugFor(owner, filename)] || [];
+}
+
+/** Fetch the app's checkpoint index. Logged out / none yet → []. Never rejects. */
+export function loadCheckpoints(owner, filename) {
+  var slug = slugFor(owner, filename);
+  return memGet(indexKey(slug)).then(function (v) {
+    var items = (v && Array.isArray(v.items)) ? v.items : [];
+    cache[slug] = items;
+    return items;
+  });
+}
+
+// Store `b64` as a new checkpoint, newest first, pruning past MAX_CHECKPOINTS. The body goes in its
+// own record so one snapshot never blows the per-value size cap.
+function pushCheckpoint(slug, b64, note) {
+  var id = String(Date.now());
+  return memPut(bodyKey(slug, id), { html: b64 }).then(function () {
+    var entry = {
+      id: id,
+      at: new Date().toISOString(),
+      note: String(note || '').slice(0, 160),
+      size: Math.round(b64.length * 0.75),
+    };
+    var all = [entry].concat(cache[slug] || []);
+    var keep = all.slice(0, MAX_CHECKPOINTS);
+    var prune = all.slice(MAX_CHECKPOINTS);
+    cache[slug] = keep;
+    return memPut(indexKey(slug), { version: 1, updatedAt: entry.at, items: keep })
+      .then(function () {
+        return Promise.all(prune.map(function (p) { return memDelete(bodyKey(slug, p.id)); }));
+      })
+      .then(function () { return entry; });
+  });
+}
+
+/**
+ * Read the saved working copy back (base64), or null when there is none. Essential after a reload:
+ * without it the catalog can only re-fetch the LIVE bytes, and would then show the published app
+ * while calling it your working copy — and overwrite the real one on the next save.
+ */
+export function getDraft(owner, filename) {
+  var b = base(), token = tok();
+  if (!b || !token) return Promise.resolve(null);
+  return fetch(b + '/v1/apps/' + encodeURIComponent(owner) + '/' + encodeURIComponent(filename) + '/draft', {
+    headers: { 'Authorization': 'Bearer ' + token },
+  })
+    .then(function (r) { return r.ok ? r.json() : null; })
+    .then(function (j) { return (j && j.data && typeof j.data.content === 'string') ? j.data : null; })
+    .catch(function () { return null; });
+}
+
+/** PUT the bytes into the app's server draft slot (the persistent working copy). */
+export function putDraft(owner, filename, b64) {
+  var b = base(), token = tok();
+  if (!b || !token) return Promise.reject(new Error('not signed in'));
+  return fetch(b + '/v1/apps/' + encodeURIComponent(owner) + '/' + encodeURIComponent(filename) + '/draft', {
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json', 'Authorization': 'Bearer ' + token },
+    body: JSON.stringify({ content: b64 }),
+  }).then(function (r) {
+    return r.json().then(function (j) {
+      if (!j.ok) throw new Error((j.error && (j.error.message || j.error.code)) || ('HTTP ' + r.status));
+      return j.data;
+    });
+  });
+}
+
+/** Discard the server draft slot (the live app is untouched). Idempotent. */
+export function discardWorkingCopy(owner, filename) {
+  var b = base(), token = tok();
+  if (!b || !token) return Promise.resolve();
+  return fetch(b + '/v1/apps/' + encodeURIComponent(owner) + '/' + encodeURIComponent(filename) + '/draft', {
+    method: 'DELETE',
+    headers: { 'Authorization': 'Bearer ' + token },
+  }).catch(function () { /* nothing to discard */ });
+}
+
+/**
+ * Save new bytes as the app's working copy.
+ * opts = { owner, filename, previousB64, nextB64, note }
+ * The bytes being REPLACED (previousB64) become a checkpoint first — so the state you are leaving
+ * is always recoverable — then the new bytes are persisted to the server draft slot.
+ * Resolves to { checkpointed: bool, draft }.
+ */
+export function saveWorkingCopy(opts) {
+  var owner = opts.owner, filename = opts.filename;
+  var slug = slugFor(owner, filename);
+  var shouldCheckpoint = !!opts.previousB64 && opts.previousB64 !== opts.nextB64;
+  var chain = shouldCheckpoint
+    ? pushCheckpoint(slug, opts.previousB64, opts.note).catch(function () { return null; })
+    : Promise.resolve(null);
+  return chain.then(function (entry) {
+    return putDraft(owner, filename, opts.nextB64).then(function (draft) {
+      return { checkpointed: !!entry, draft: draft };
+    });
+  });
+}
+
+/** Read one checkpoint's stored HTML (base64). Missing/expired → null. */
+export function readCheckpoint(owner, filename, id) {
+  return memGet(bodyKey(slugFor(owner, filename), id)).then(function (v) {
+    return (v && typeof v.html === 'string') ? v.html : null;
+  });
+}
+
+/** Remove one checkpoint from the index and delete its body record. */
+export function deleteCheckpoint(owner, filename, id) {
+  var slug = slugFor(owner, filename);
+  var items = (cache[slug] || []).filter(function (c) { return c.id !== id; });
+  cache[slug] = items;
+  return memPut(indexKey(slug), { version: 1, updatedAt: new Date().toISOString(), items: items })
+    .then(function () { return memDelete(bodyKey(slug, id)); });
+}

package/dist/static/app-catalog/styles/app-catalog.css

@@ -610,6 +610,13 @@
     .fav-toggle.on { opacity: 1; }
     .published-card { position: relative; }
     .published-card .fav-toggle { left: auto; right: 8px; top: 8px; }
+    /* Library/community cards already own the top-LEFT corner with the Listed/Unlisted badge, so
+       the star sits top-RIGHT instead of on top of it. Keep clear of the ⋮ menu button, which only
+       local cards render: :has() pulls the star back to the edge when there is no menu. Where
+       :has() is unsupported that selector is simply dropped and the star keeps the wider offset —
+       a little gap, never an overlap. */
+    .app-card .fav-toggle { left: auto; right: 40px; top: 6px; }
+    .app-card:not(:has(.card-menu-btn)) .fav-toggle { right: 8px; }
     .fav-section-title {
       font-size: 1rem;
       font-weight: 700;
@@ -1144,6 +1151,33 @@
     .dtl-sync.diff { background: rgba(245,158,11,.14); color: #f59e0b; }
     .dtl-sync.none { background: var(--bg-subtle); color: var(--text-muted); }
 
+    /* ── Working copy → published lifecycle band (TARGET-048) ──────────────────
+       Replaces the old two-number STATUS card: two labelled stops that say, in plain words, who
+       can see what. The active stop is highlighted so "where is my work" is answerable at a glance. */
+    .wc-row { display: flex; gap: 16px; align-items: flex-start; flex-wrap: wrap; }
+    .wc-band { flex: 1; min-width: 240px; display: flex; align-items: stretch; gap: 10px; flex-wrap: wrap; }
+    .wc-stop {
+      display: flex; flex-direction: column; gap: 2px;
+      padding: 10px 12px; border-radius: 10px;
+      border: 1px solid var(--border-subtle); background: var(--bg-subtle);
+      min-width: 150px; flex: 1;
+    }
+    .wc-stop.is-active { border-color: rgba(245, 158, 11, .55); background: rgba(245, 158, 11, .10); }
+    .wc-stop.is-live { border-color: rgba(52, 211, 153, .45); background: rgba(52, 211, 153, .10); }
+    .wc-stop-label { font-size: .7rem; text-transform: uppercase; letter-spacing: .04em; color: var(--text-muted); }
+    .wc-stop-val { font-size: .95rem; font-weight: 700; color: var(--text); }
+    .wc-stop-note { font-size: .75rem; color: var(--text-muted); }
+    .wc-arrow { align-self: center; color: var(--text-muted); font-size: 1.1rem; }
+    .wc-explain { font-size: .88rem; color: var(--text); line-height: 1.5; margin: 12px 0 10px; }
+    .wc-size { font-size: .75rem; color: var(--text-muted); margin: 8px 0 0; }
+    .wc-muted { color: var(--text-muted); font-size: .85rem; }
+    /* One-line reminder of what the three verbs do — shown under both button rows so the source
+       editor and the AI loop explain themselves identically. */
+    .wc-verbs-hint { font-size: .78rem; color: var(--text-muted); line-height: 1.45; margin: 10px 0 0; }
+    .wc-proposal-head { margin: 0 0 8px; }
+    .wc-ckpt-when { display: block; font-size: .85rem; font-weight: 600; color: var(--text); }
+    .wc-ckpt-note { display: block; font-size: .78rem; color: var(--text-muted); }
+
     .dtl-meta-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(180px, 1fr)); gap: 12px; }
     .dtl-meta-item .dtl-meta-label { font-size: .7rem; text-transform: uppercase; letter-spacing: .04em; color: var(--text-muted); }
     .dtl-meta-item .dtl-meta-val { font-size: .9rem; color: var(--text); word-break: break-word; }
@@ -2186,3 +2220,29 @@
 .aga-deploy-btn { white-space: nowrap; }
 .aga-btn-sm { padding: 2px 10px; font-size: .75rem; margin-left: auto; }
 .published-card-badgerow .pcb-agent { cursor: default; }
+
+/* ── EXCHANGE & ODPS (app detail) ──────────────────────────────────────────────
+   The app-level marketplace status plus the ODPS authoring forms (app defaults and the per-tool
+   descriptor). Themed through the same variables as the rest of the detail view; the attestation
+   block is set apart on purpose, because those fields are legal promises rather than marketing copy. */
+.od-status { font-size: .86rem; font-weight: 600; padding: 6px 10px; border-radius: 8px; display: inline-block; }
+.od-status-on { background: rgba(52,211,153,.12); color: #34d399; }
+.od-status-none { background: var(--bg-subtle); color: var(--text-muted); }
+.od-note { margin: 6px 0 8px; }
+.od-muted { color: var(--text-muted); font-size: .85rem; }
+.od-actions { margin-top: 10px; }
+.od-form { margin-top: 10px; }
+.od-input { margin: 4px 0 8px; }
+.od-grid { display: flex; gap: 10px; flex-wrap: wrap; }
+.od-col { flex: 1; min-width: 150px; }
+.od-col-narrow { flex: 0 0 110px; min-width: 90px; }
+.od-attest { border: 1px solid var(--border); border-radius: 8px; padding: 8px 10px; margin: 8px 0; background: var(--bg-subtle); }
+.od-attest-head { font-weight: 600; margin-bottom: 2px; }
+.od-tool-head { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; margin: 8px 0 4px; }
+.od-link { font-size: .8rem; color: var(--accent); text-decoration: none; }
+.od-link:hover { text-decoration: underline; }
+.od-blocked { flex-basis: 100%; font-size: .8rem; color: #f59e0b; margin-top: 4px; }
+.od-ok { color: #34d399; }
+.od-err { color: var(--accent); }
+/* Measured delivery time offered as the basis for a commitment (never as the commitment itself). */
+.od-measured { font-size: 12px; color: var(--text-muted); margin: 4px 0 8px; display: flex; gap: 8px; align-items: center; flex-wrap: wrap; }