latticesql 2.2.1 → 2.2.2

package/dist/cli.js

@@ -7584,20 +7584,6 @@ var css = `
     .grants-panel .grants-title { font-weight: 600; margin-bottom: 6px; }
     .grants-panel .grants-row { display: flex; align-items: center; gap: 8px; padding: 3px 0; cursor: pointer; }
     .grants-panel .grants-row input { accent-color: var(--accent); }
-    /* Deprecation banner: shown when the workspace holds a grandfathered
-       direct database cloud connection (no row-level security). Amber so
-       it reads as a warning, not an error. */
-    .deprecation-banner {
-      display: flex; align-items: center; gap: 12px;
-      padding: 8px 16px; font-size: 13px;
-      background: rgba(234, 179, 8, 0.12); color: var(--text);
-      border-bottom: 1px solid rgba(234, 179, 8, 0.45);
-    }
-    .deprecation-banner button {
-      margin-left: auto; background: transparent; border: none; cursor: pointer;
-      color: var(--text-muted); font-size: 13px; padding: 2px 6px; border-radius: 4px;
-    }
-    .deprecation-banner button:hover { background: rgba(234, 179, 8, 0.18); }
 
     /* Inline create-row at the bottom of every table */
     tr.create-row td { background: var(--surface-2); }
@@ -9088,27 +9074,6 @@ var appJs = `
 
     window.addEventListener('hashchange', renderRoute);
 
-    // Deprecation banner: a grandfathered direct database cloud connection
-    // bypasses the hosted server's row security entirely \u2014 say so up front.
-    // Dismiss hides it for this browser session only.
-    function initDeprecationBanner() {
-      if (sessionStorage.getItem('lattice-direct-banner-dismissed')) return;
-      fetchJson('/api/dbconfig').then(function (d) {
-        if (!d || !d.directCloud) return;
-        var banner = document.getElementById('deprecation-banner');
-        var text = document.getElementById('deprecation-banner-text');
-        if (!banner || !text) return;
-        text.textContent = "Direct database cloud connections are deprecated and don't support row-level security. Migrate to a hosted workspace.";
-        banner.hidden = false;
-        var dismiss = document.getElementById('deprecation-banner-dismiss');
-        if (dismiss) dismiss.addEventListener('click', function () {
-          banner.hidden = true;
-          sessionStorage.setItem('lattice-direct-banner-dismissed', '1');
-        });
-      }).catch(function () { /* dbconfig unavailable (e.g. team-cloud server mode) \u2014 no banner */ });
-    }
-    initDeprecationBanner();
-
     // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
     // Sidebar
     // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
@@ -11509,9 +11474,11 @@ var appJs = `
             headers: { 'content-type': 'application/json' },
             body: JSON.stringify({ share: !isShared }),
           }).then(function () {
-            // The server updated team visibility in place (no DB re-open),
-            // so a light in-place refresh reflects it without a full reload.
-            return dmRefreshPanel(tableName, false);
+            // Rebuild the graph (not just the panel) so the node's share-status
+            // colour (gnode-shared/gnode-private) recolours immediately from the
+            // refreshed entities \u2014 otherwise the swatch stayed stale until a
+            // manual reload. The editor re-shows for the same table.
+            return dmRefreshPanel(tableName, true);
           }).then(function () {
             showToast(isShared ? 'Unshared "' + tableName + '" from workspace' : 'Shared "' + tableName + '" with workspace', {});
           }).catch(function (e) { showToast('Share update failed: ' + e.message, {}); });
@@ -14231,10 +14198,6 @@ var guiAppHtml = `<!doctype html>
       </svg>
     </button>
   </header>
-  <div class="deprecation-banner" id="deprecation-banner" hidden>
-    <span id="deprecation-banner-text"></span>
-    <button id="deprecation-banner-dismiss" title="Dismiss for this session" aria-label="Dismiss">\u2715</button>
-  </div>
   <div class="layout">
     <nav class="sidebar">
       <label class="sidebar-advanced toggle" title="Advanced mode \u2014 row/table editor instead of the file workspace">
@@ -15406,19 +15369,12 @@ async function destroyTeamDirect(db) {
   }
   await db.delete("__lattice_team_identity", "singleton");
 }
-var directDeprecationWarned = false;
 async function openCloud(cloudUrl) {
   if (!isPostgresUrl(cloudUrl)) {
     throw new Error(
       `direct-ops: cloudUrl must be a postgres:// URL (got ${cloudUrl.slice(0, 12)}\u2026)`
     );
   }
-  if (!directDeprecationWarned) {
-    directDeprecationWarned = true;
-    console.warn(
-      "[teams] Direct postgres:// team-cloud connection is deprecated and does NOT enforce 2.2 row-level security. Migrate to a hosted Lattice Teams server."
-    );
-  }
   const db = new Lattice(cloudUrl);
   await db.init();
   for (const [table, def] of Object.entries(CLOUD_INTERNAL_TABLE_DEFS)) {
@@ -15583,7 +15539,7 @@ async function resolveUserIdByEmail(db, email) {
 function isVisibleInTeam(tableName, ctx) {
   if (ctx.shared.has(tableName)) return true;
   const owner = ctx.owners.get(tableName);
-  if (owner === void 0) return true;
+  if (owner === void 0) return ctx.isCreator;
   return owner === ctx.myUserId;
 }
 async function listTeamUsers(db) {
@@ -19403,10 +19359,7 @@ async function dispatchDbConfigRoute(req, res, ctx) {
         // without a local `__lattice_team_connections` row (which doesn't
         // exist when the team cloud itself is the active database).
         teamId: ctx.teamMembership?.teamId ?? null,
-        myUserId: ctx.teamMembership?.myUserId ?? null,
-        // Deprecated direct postgres:// team connection present → the SPA
-        // shows the migrate-to-hosted deprecation banner.
-        directCloud: ctx.directCloud
+        myUserId: ctx.teamMembership?.myUserId ?? null
       });
     });
     return true;
@@ -20865,8 +20818,12 @@ async function buildSchemaContext(d) {
   }
   return lines.join("\n");
 }
-function buildSystemPrompt(schema) {
-  return `${BASE_SYSTEM_PROMPT}
+function buildSystemPrompt(schema, operatorName) {
+  const who = operatorName && operatorName.trim().length > 0 ? `
+
+# Who you are assisting
+You are assisting ${operatorName.trim()}. When the user says "me" / "my", they mean ${operatorName.trim()}; never ask the user for their own name.` : "";
+  return `${BASE_SYSTEM_PROMPT}${who}
 
 # Current database
 ${schema}`;
@@ -20881,7 +20838,7 @@ async function* runChat(opts) {
     ...opts.history ?? [],
     { role: "user", content: opts.userMessage }
   ];
-  const system = buildSystemPrompt(await buildSchemaContext(opts.dispatch));
+  const system = buildSystemPrompt(await buildSchemaContext(opts.dispatch), opts.operatorName);
   let loop = 0;
   try {
     for (; loop < MAX_TOOL_LOOPS; loop++) {
@@ -21492,6 +21449,9 @@ async function dispatchChatRoute(req, res, ctx) {
       history,
       userMessage: message,
       temperature,
+      // Give the assistant the operator's name so it addresses them and
+      // resolves "me"/"my" without asking for a name it already has.
+      operatorName: readIdentity().display_name,
       // Capture each executed tool call (capped) for cross-turn replay memory.
       onToolRecord: (rec) => {
         turns[turns.length - 1]?.toolCalls.push(rec);
@@ -22073,6 +22033,10 @@ async function attachBlob(srcPath, latticeRoot) {
 }
 
 // src/gui/ingest-routes.ts
+function fileSlug(name, id) {
+  const base = slugify(name.replace(/\.[^./\\]+$/, "")) || "file";
+  return `${base}-${id.slice(0, 8)}`;
+}
 var MIME_BY_EXT = {
   ".pdf": "application/pdf",
   ".png": "image/png",
@@ -22440,8 +22404,10 @@ async function dispatchIngestRoute(req, res, ctx) {
     } finally {
       await rm(tmp, { force: true }).catch(() => void 0);
     }
+    const fileId = crypto.randomUUID();
     const { id: id2 } = await createRow(mctx, "files", {
-      id: crypto.randomUUID(),
+      id: fileId,
+      slug: fileSlug(name2, fileId),
       original_name: name2,
       mime: mime2,
       size_bytes: buf.length,
@@ -22492,8 +22458,10 @@ async function dispatchIngestRoute(req, res, ctx) {
         console.warn("[ingest] url crawl failed:", e.message);
       }
     }
+    const textFileId = crypto.randomUUID();
     const { id: id2 } = await createRow(mctx, "files", {
-      id: crypto.randomUUID(),
+      id: textFileId,
+      slug: fileSlug(title, textFileId),
       original_name: title,
       mime: mime2,
       size_bytes: Buffer.byteLength(content, "utf8"),
@@ -22527,8 +22495,10 @@ async function dispatchIngestRoute(req, res, ctx) {
   }
   const name = basename10(abs);
   const mime = mimeFor(name);
+  const localFileId = crypto.randomUUID();
   const { id } = await createRow(mctx, "files", {
-    id: crypto.randomUUID(),
+    id: localFileId,
+    slug: fileSlug(name, localFileId),
     path: abs,
     original_name: name,
     mime,
@@ -23065,13 +23035,6 @@ async function openConfig(configPath, outputDir, autoRender = false) {
       if (!isVisibleInTeam(name, teamContext)) validTables.delete(name);
     }
   }
-  let directTeamConnection = false;
-  try {
-    const conns = await teamsClient.listConnections();
-    directTeamConnection = conns.some((c) => isPostgresUrl(c.cloud_url));
-  } catch (e) {
-    console.warn("[openConfig] could not check for direct team connections:", e.message);
-  }
   let realtime = null;
   if (db.getDialect() === "postgres") {
     try {
@@ -23112,7 +23075,6 @@ async function openConfig(configPath, outputDir, autoRender = false) {
     teamsClient,
     validTables,
     teamContext,
-    directTeamConnection,
     junctionTables,
     entityContextByTable,
     manifest,
@@ -25208,7 +25170,6 @@ data: ${JSON.stringify(data)}
               teamId: active.teamContext.teamId,
               myUserId: active.teamContext.myUserId
             } : null,
-            directCloud: active.directTeamConnection,
             swap: async () => {
               const next = await openConfig(active.configPath, active.outputDir, autoRender);
               await disposeActive(active);

package/dist/index.cjs

@@ -8096,19 +8096,12 @@ async function destroyTeamDirect(db) {
   }
   await db.delete("__lattice_team_identity", "singleton");
 }
-var directDeprecationWarned = false;
 async function openCloud(cloudUrl) {
   if (!isPostgresUrl(cloudUrl)) {
     throw new Error(
       `direct-ops: cloudUrl must be a postgres:// URL (got ${cloudUrl.slice(0, 12)}\u2026)`
     );
   }
-  if (!directDeprecationWarned) {
-    directDeprecationWarned = true;
-    console.warn(
-      "[teams] Direct postgres:// team-cloud connection is deprecated and does NOT enforce 2.2 row-level security. Migrate to a hosted Lattice Teams server."
-    );
-  }
   const db = new Lattice(cloudUrl);
   await db.init();
   for (const [table, def] of Object.entries(CLOUD_INTERNAL_TABLE_DEFS)) {

package/dist/index.js

@@ -7962,19 +7962,12 @@ async function destroyTeamDirect(db) {
   }
   await db.delete("__lattice_team_identity", "singleton");
 }
-var directDeprecationWarned = false;
 async function openCloud(cloudUrl) {
   if (!isPostgresUrl(cloudUrl)) {
     throw new Error(
       `direct-ops: cloudUrl must be a postgres:// URL (got ${cloudUrl.slice(0, 12)}\u2026)`
     );
   }
-  if (!directDeprecationWarned) {
-    directDeprecationWarned = true;
-    console.warn(
-      "[teams] Direct postgres:// team-cloud connection is deprecated and does NOT enforce 2.2 row-level security. Migrate to a hosted Lattice Teams server."
-    );
-  }
   const db = new Lattice(cloudUrl);
   await db.init();
   for (const [table, def] of Object.entries(CLOUD_INTERNAL_TABLE_DEFS)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "latticesql",
-  "version": "2.2.1",
+  "version": "2.2.2",
   "description": "Persistent structured memory for AI agent systems — pluggable SQLite or Postgres backend, LLM context bridge",
   "type": "module",
   "main": "./dist/index.js",