@kubun/plugin-connector 0.14.0 → 0.14.2

package/lib/sync/workflow.js

@@ -14,7 +14,7 @@ import { MAX_LOGGED_ERRORS } from './processor.js';
  * definitions (two "boots" over one DB) do not share iterators — which is what
  * makes crash-recovery re-open the provider from the checkpoint.
  */ export function createConnectorSyncWorkflow(params) {
-    const { registry, credentialProvider, stateStore, syncEventEmitter, stores, mutateDocuments, logger } = params;
+    const { registry, credentialProvider, stateStore, syncEventEmitter, stores, mutateDocuments, logger, emitAuthRequired } = params;
     const sessions = new Map();
     const sessionKey = (state)=>`${state.connectorName}:${state.ownerDID}`;
     const effectiveBoundary = params.boundary ?? {
@@ -64,6 +64,15 @@ import { MAX_LOGGED_ERRORS } from './processor.js';
                     lastSyncedAt: new Date().toISOString(),
                     failedSample: []
                 };
+                // Only a genuinely absent credential asks for (re)authorization; an absent
+                // server provider stays a silent configuration outcome. Both still end
+                // offline (the event is additive, not a change to the offline outcome).
+                if (providerName != null && credential == null) {
+                    emitAuthRequired?.({
+                        provider: providerName,
+                        ownerDID
+                    });
+                }
                 return {
                     status: 'end',
                     state: offlineState,
@@ -126,6 +135,20 @@ import { MAX_LOGGED_ERRORS } from './processor.js';
                 }
                 const providerName = connector.auth.provider !== 'device' ? connector.auth.provider : null;
                 const credential = providerName ? await credentialProvider.get(providerName, state.ownerDID) : null;
+                // A crash-recovered batch whose credential has since been removed cannot
+                // resume: signal (re)authorization and end offline rather than opening the
+                // provider with an empty credential (which would fail mid-sync ⇒ error).
+                if (providerName != null && credential == null) {
+                    emitAuthRequired?.({
+                        provider: providerName,
+                        ownerDID: state.ownerDID
+                    });
+                    return {
+                        status: 'end',
+                        state,
+                        outcome: 'offline'
+                    };
+                }
                 if (connector.serverProvider == null) {
                     throw new Error(`Connector "${state.connectorName}" has no server provider`);
                 }
@@ -258,7 +281,8 @@ import { MAX_LOGGED_ERRORS } from './processor.js';
                 start,
                 batch,
                 finalize
-            }
+            },
+            managed: true
         }
     };
 }

package/lib/write-grants.d.ts

@@ -1,8 +1,11 @@
-import type { CredentialProvider } from '@kubun/credential-types';
+import type { Credential, CredentialProvider } from '@kubun/credential-types';
 import { HLC } from '@kubun/hlc';
 import { getDelegationStore } from '@kubun/store-delegation';
 import type { ConnectorRegistry } from './registry.js';
 import type { ConnectorWriteGrant } from './schema.js';
+type CredentialFacade = CredentialProvider & {
+    peek?(providerName: string, ownerDID: string): Promise<Credential | null>;
+};
 export type WriteGrantContextParams = {
     registry: ConnectorRegistry;
     /** The server identity a viewer delegates its write authority to (`aud`). */
@@ -10,8 +13,12 @@ export type WriteGrantContextParams = {
     /** The calling viewer (raw, unnormalized) — the grantor of every cap. */
     viewerDID: string;
     stores: Parameters<typeof getDelegationStore>[0];
-    credentialProvider: CredentialProvider;
+    credentialProvider: CredentialFacade;
     hlc: HLC;
+    onCredentialRemoved?: (params: {
+        provider: string;
+        ownerDID: string;
+    }) => void;
 };
 export type WriteGrantContext = {
     grantWriteCapability(args: {
@@ -33,3 +40,4 @@ export type WriteGrantContext = {
  * stored `resource` string handled here is only the revoke/list selector.
  */
 export declare function createWriteGrantContext(params: WriteGrantContextParams): WriteGrantContext;
+export {};

package/lib/write-grants.js

@@ -240,8 +240,17 @@ async function revokeCapsSubsetOf(delegationStore, grantor, audience, allowed) {
             }
             const delegationStore = await getDelegationStore(stores);
             const removed = await revokeCapsSubsetOf(delegationStore, viewerDID, audienceDID, providerURNs);
-            const credentialExisted = await credentialProvider.get(provider, viewerDID) != null;
+            // Test existence with the non-refreshing peek (falling back to `get` only
+            // when a caller supplies no peek) so disconnecting an expiring credential
+            // does not trigger a transparent refresh right before the delete.
+            const credentialExisted = (credentialProvider.peek != null ? await credentialProvider.peek(provider, viewerDID) : await credentialProvider.get(provider, viewerDID)) != null;
             await credentialProvider.delete(provider, viewerDID);
+            if (credentialExisted) {
+                params.onCredentialRemoved?.({
+                    provider,
+                    ownerDID: viewerDID
+                });
+            }
             return removed > 0 || credentialExisted;
         },
         connectorWriteGrants: async ()=>{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kubun/plugin-connector",
-  "version": "0.14.0",
+  "version": "0.14.2",
   "license": "see LICENSE.md",
   "sideEffects": false,
   "type": "module",
@@ -18,23 +18,23 @@
     "@kokuin/jwe": "^0.1.0",
     "@kokuin/token": "^0.5.0",
     "@kubun/connector": "^0.14.0",
-    "@kubun/credential": "^0.14.0",
+    "@kubun/credential": "^0.14.2",
     "@kubun/credential-types": "^0.14.0",
     "@kubun/db": "^0.14.0",
-    "@kubun/engine": "^0.14.0",
-    "@kubun/graphql": "^0.14.0",
+    "@kubun/engine": "^0.14.1",
+    "@kubun/graphql": "^0.14.1",
     "@kubun/hlc": "^0.14.0",
     "@kubun/id": "^0.14.0",
     "@kubun/logger": "^0.14.0",
     "@kubun/plugin-blob-api": "^0.14.0",
-    "@kubun/plugin-workflow-api": "^0.14.0",
-    "@kubun/protocol": "^0.14.0",
+    "@kubun/plugin-workflow-api": "^0.14.1",
+    "@kubun/protocol": "^0.14.1",
     "@kubun/service-credential-api": "^0.14.0",
     "@kubun/store-connector": "^0.14.0",
     "@kubun/store-credential": "^0.14.0",
     "@kubun/store-delegation": "^0.14.0",
-    "@kubun/store-graph": "^0.14.0",
-    "@noble/hashes": "^2.3.0",
+    "@kubun/store-graph": "^0.14.1",
+    "@noble/hashes": "^2.4.0",
     "@sozai/async": "^0.2.1",
     "@sozai/codec": "^0.4.0",
     "@sozai/event": "^0.1.3",
@@ -56,11 +56,11 @@
     "@kubun/plugin-credential": "^0.14.0",
     "@kubun/plugin-service-client": "^0.14.0",
     "@kubun/plugin-service-server": "^0.14.0",
-    "@kubun/plugin-workflow": "^0.14.0",
+    "@kubun/plugin-workflow": "^0.14.1",
     "@kubun/service-controller-log-api": "^0.14.0",
     "@kubun/store-blob": "^0.14.0",
     "@kubun/store-controller": "^0.14.0",
-    "@kubun/store-workflow": "^0.14.0",
+    "@kubun/store-workflow": "^0.14.1",
     "@kubun/test-utils": "^0.13.0",
     "@testcontainers/postgresql": "^12.1.0",
     "get-port": "^7.2.0"