@mdbase-dev/connect 0.1.0-beta.108 → 0.1.0-beta.110

package/dist/browser/mdbase-connect.min.js.sha384

@@ -1 +1 @@
-sha384-wpc0R7K2M2u/v8bIQcBgnveqMOK02ergpDhAolUQ2yEXNgyXH7U7pLkhlzyvmKZs
+sha384-87GfQ8HHeR0B68yJLi01ycH5DHMGUf0jbXDsLhhpaYD8jpF/qvol4yQtP7hdPExh

package/dist/connect.js

@@ -5,7 +5,6 @@ import { authorizationCallbackState } from "./authorization-url.js";
 import { randomBase64Url } from "./base64.js";
 import { ApplicationIdentityStoreError, IndexedDbApplicationIdentityStore, MemoryApplicationIdentityStore, applicationIdentity, applicationInstallationId, signApplicationAuthorization } from "./application-identity.js";
 import { MdbaseConnection } from "./connection.js";
-import { addConnectionId, connectionIds, removeConnectionId } from "./connection-index.js";
 import { assertFreshV2AuthorizationSupport, authorizationAbort, declarationIdFromFamilyIdentity } from "./connect-authorization-helpers.js";
 import { IndexedDbGrantKeyStore, MemoryGrantKeyStore } from "./crypto.js";
 import { MdbaseConnectError, connectError, serverConnectError } from "./errors.js";
@@ -13,7 +12,7 @@ import { prepareAuthorizationWindow, publishPopupAuthorizationCompletion, waitFo
 import { pendingRecoveryTransports, removePendingMutations } from "./pending-recovery-transports.js";
 import { GrantKeyLeaseRegistry } from "./grant-key-leases.js";
 import { resolveConnectTimeouts, withRequestBudget } from "./request-budget.js";
-import { MemoryStorage, apiError, applicationStorageOrigin, canonicalLoopbackUrl, collectionIdFromTokenKey, connectFetch, createPkce, defaultStorage, decodeJsonResponse, isOpaquePortableManifest, resolveManifestSource, oauthErrorCode, parseDeviceAuthorization, parseStored, stripTrailingSlash, validAuthorityTokenResponse } from "./runtime-utils.js";
+import { MemoryStorage, addConnectionId, connectionIds, removeConnectionId, apiError, applicationStorageOrigin, canonicalLoopbackUrl, collectionIdFromTokenKey, connectFetch, createPkce, defaultStorage, decodeJsonResponse, isOpaquePortableManifest, resolveManifestSource, oauthErrorCode, parseDeviceAuthorization, parseStored, stripTrailingSlash, validAuthorityTokenResponse } from "./runtime-utils.js";
 import { storedTokenFromResponse } from "./token-response.js";
 import { deleteUnusedGrantKey, planRetiredGrantKeys, storedTokenKeyHandles } from "./retired-grant-keys.js";
 import { SharedOperationMap } from "./shared-operation.js";

package/dist/connection-types.d.ts

@@ -1,5 +1,12 @@
 import type { CollectionOperation, FileCapability, GrantScope, JsonObject, SyncChangesPage, SyncMutation, SyncMutationReceipt, SyncSession, SyncSnapshotPage } from "@mdbase-dev/connect-protocol";
 import type { ConnectRequestOptions } from "./operation-types.js";
+export interface MdbaseDeviceAuthorization {
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete: string;
+    expiresAt: number;
+    intervalSeconds: number;
+}
 export type MdbaseConnectionRoute = "remote" | "direct" | "relay";
 export type DirectAccessStatus = "disabled" | "permission_required" | "checking" | "available" | "unavailable" | "denied";
 export interface MdbaseConnectionInfo {

package/dist/connection.d.ts

@@ -8,7 +8,7 @@ import { type Application } from "./internal-types.js";
 import type { MdbaseNativeNotificationRegistration, MdbaseNativeNotificationRegistrationOptions, MdbaseNotificationRegistration, MdbaseNotificationRegistrationOptions } from "./notifications.js";
 import type { ChangesInput, CollectionChangesPage, CollectionDescription, CollectionSetupApplyResult, CollectionSetupAssessment, ApplyCollectionSetupInput, ApplyTypePackInput, AssessCollectionSetupInput, AssessTypePackInput, CreateInput, CreateTypeInput, CreateViewSourceInput, DeleteInput, DeletePreflightResult, DeleteProgressOptions, DeleteResult, DeleteViewSourceInput, DeleteViewSourceResult, ExecuteViewInput, MdbaseDesiredTimer, MdbaseTimer, MdbaseTimerList, MdbaseTimerReconciliation, ConnectRequestOptions, PendingMutation, QueryAllOptions, QueryInput, QueryPage, QueryPagesOptions, QueryResult, ReadInput, ReadTypeInput, ReadViewSourceInput, RenameInput, RenamePreflightResult, RenameProgressOptions, RenameResult, RecordDocument, SavedViewExecution, SavedViewPage, SavedViewPagesOptions, SavedViewList, SavedViewSourceDocument, TypePackApplyResult, TypePackAssessment, UpdateInput, UpdateTypeInput, UpdateViewSourceInput, MdbaseWatchSubscription, WatchInput } from "./operation-types.js";
 import { type AuthorizationProblemCode, type CollectionChangesProblemCode, type CollectionDescriptionProblemCode, type CollectionMutationProblemCode, type CollectionQueryProblemCode, type CollectionReadProblemCode, type CollectionTypeProblemCode, type ConnectOutcome, type DirectAccessProblemCode, type NotificationProblemCode, type RegistrationProblemCode } from "./outcomes.js";
-import type { MdbaseDeviceAuthorization } from "./authorization-types.js";
+import type { MdbaseDeviceAuthorization } from "./connection-types.js";
 import { type ResolvedConnectTimeouts } from "./request-budget.js";
 export type MdbaseAuthorizationTarget = {
     kind: "choose";

package/dist/file-transfer-internals.js

@@ -174,7 +174,11 @@ export function requirePreparedPart(part, transferId, partIndex, offset, content
         || part.part_index !== partIndex
         || part.offset !== offset
         || part.content_length !== contentLength
+        || typeof part.method !== "string"
         || part.method.toUpperCase() !== method
+        || !part.headers || typeof part.headers !== "object" || Array.isArray(part.headers)
+        || Object.values(part.headers).some((value) => typeof value !== "string")
+        || typeof part.expires_at !== "string" || !Number.isFinite(Date.parse(part.expires_at))
         || url.protocol !== "https:"
             && !(url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]", "::1"].includes(url.hostname))
         || url.username

package/dist/files.js

@@ -144,21 +144,36 @@ export class MdbaseFileClient {
             const partCount = session.strategy.kind === "object_put"
                 ? 1
                 : Math.ceil(size / partSize);
-            const status = await this.request("GET", `transfers/${encodeURIComponent(transferId)}`, undefined, options.signal);
-            requireTransferStatus(status, session);
-            if (status.state !== "open" && status.state !== "committed") {
-                throw connectError("invalid_operation_response", `The authority cannot resume a ${status.state} file transfer.`);
+            // Open replays its ORIGINAL receipt, not fresh progress. A still-valid
+            // create-only capability can nevertheless be reused safely: PUT either
+            // creates the candidate or returns 412, then commit verifies/replays it.
+            let bootstrap = session.prepared_upload_part;
+            if (bootstrap !== undefined) {
+                requirePreparedPart(bootstrap, transferId, 0, 0, size, "PUT");
+                if (session.strategy.kind !== "object_put"
+                    || browserObjectHeaders(bootstrap.headers).get("if-none-match") !== "*") {
+                    throw connectError("invalid_operation_response", "Upload bootstrap must be a create-only single PUT.");
+                }
+                if (Date.parse(bootstrap.expires_at) <= Date.now() + 60_000)
+                    bootstrap = undefined;
+            }
+            const status = bootstrap ? undefined : await this.request("GET", `transfers/${encodeURIComponent(transferId)}`, undefined, options.signal);
+            if (status) {
+                requireTransferStatus(status, session);
+                if (status.state !== "open" && status.state !== "committed") {
+                    throw connectError("invalid_operation_response", `The authority cannot resume a ${status.state} file transfer.`);
+                }
             }
             prepareSource?.(partSize);
-            if (!framed && status.received.length === partCount) {
+            if (!framed && status?.received.length === partCount) {
                 const replay = await this.tryReplayUploadCommit(transferId, session.strategy.kind === "object_multipart" ? status.uploaded_parts : undefined, options.signal);
                 if (replay) {
                     committed = true;
                     return clientFileDescriptor(replay.file);
                 }
             }
-            const received = new Set(status.received);
-            const uploadedParts = new Map(status.uploaded_parts.map((part) => [part.part_number - 1, part]));
+            const received = new Set(status?.received ?? []);
+            const uploadedParts = new Map((status?.uploaded_parts ?? []).map((part) => [part.part_number - 1, part]));
             let transferredBytes = [...received].reduce((total, index) => total + chunkLength(size, partSize, index), 0);
             const parts = await mapConcurrent(partCount, concurrency, async (partIndex) => {
                 const offset = partIndex * partSize;
@@ -171,7 +186,7 @@ export class MdbaseFileClient {
                     return uploadedParts.get(partIndex) ?? null;
                 const uploaded = framed
                     ? await retryChunk(async () => this.framed.uploadChunk(session, partIndex, await uploadBodyBytes(part), options.signal), options.signal).then(() => null)
-                    : await this.uploadPart(transferId, partIndex, offset, part, length, session.strategy.kind === "object_multipart", options.signal);
+                    : await this.uploadPart(transferId, partIndex, offset, part, length, session.strategy.kind === "object_multipart", options.signal, bootstrap ? { session, part: bootstrap } : undefined);
                 transferredBytes += length;
                 options.onProgress?.({
                     phase: "uploading",
@@ -472,11 +487,24 @@ export class MdbaseFileClient {
             revision: receipt.revision
         };
     }
-    async uploadPart(transferId, partIndex, offset, body, contentLength, requireEtag, signal) {
+    async uploadPart(transferId, partIndex, offset, body, contentLength, requireEtag, signal, bootstrap) {
         for (let attempt = 1; attempt <= MAX_OBJECT_ATTEMPTS; attempt += 1) {
             throwIfAborted(signal);
             try {
-                const prepared = await this.request("POST", `uploads/${encodeURIComponent(transferId)}/parts`, {
+                const reuseBootstrap = attempt === 1 && bootstrap
+                    && Date.parse(bootstrap.part.expires_at) > Date.now() + 60_000;
+                if (bootstrap && !reuseBootstrap) {
+                    // A slow byte source, clock change, or ambiguous PUT can outlive the
+                    // capability. Recover through fresh progress, never a stale receipt.
+                    const status = await this.request("GET", `transfers/${encodeURIComponent(transferId)}`, undefined, signal);
+                    requireTransferStatus(status, bootstrap.session);
+                    if (status.state !== "open" && status.state !== "committed") {
+                        throw connectError("invalid_operation_response", `The authority cannot resume a ${status.state} file transfer.`);
+                    }
+                    if (status.received.includes(partIndex))
+                        return { part_number: partIndex + 1, etag: "" };
+                }
+                const prepared = reuseBootstrap ? bootstrap.part : await this.request("POST", `uploads/${encodeURIComponent(transferId)}/parts`, {
                     protocol_version: FILE_PROTOCOL_VERSION,
                     type: "prepare_file_upload_part",
                     transfer_id: transferId,
@@ -484,13 +512,21 @@ export class MdbaseFileClient {
                     content_length: contentLength
                 }, signal);
                 requirePreparedPart(prepared, transferId, partIndex, offset, contentLength, "PUT");
+                const requestHeaders = browserObjectHeaders(prepared.headers);
                 const response = await fetch(prepared.url, {
                     method: prepared.method,
-                    headers: browserObjectHeaders(prepared.headers),
+                    headers: requestHeaders,
                     body,
                     redirect: "error",
                     signal
                 });
+                // A lost successful create-only PUT can be retried after the object
+                // already exists. 412 is not proof of success: commit must still verify
+                // the authoritative object's digest/length and publish its receipt.
+                const existingCandidate = response.status === 412 && !requireEtag
+                    && requestHeaders.get("if-none-match") === "*";
+                if (existingCandidate)
+                    return { part_number: partIndex + 1, etag: "" };
                 if (!response.ok)
                     throw new Error(`Object upload failed with HTTP ${response.status}.`);
                 const etag = response.headers.get("etag");

package/dist/index.d.ts

@@ -1,11 +1,10 @@
-export type { MdbaseDeviceAuthorization } from "./authorization-types.js";
 export { MdbaseApplicationSession, MdbaseMemoryVerificationStore } from "./application-session.js";
 export type { MdbaseApplicationSessionOptions, MdbaseApplicationVerificationStore, MdbaseDefinitionUpdate, MdbaseCollectionSetupUpdate, MdbaseApplicationSessionSnapshot } from "./application-session.js";
 export type { MdbaseConnectOptions, MdbaseConnectTimeouts, MdbaseFrontmatter } from "./connect-options.js";
 export { MdbaseConnect } from "./mdbase-connect.js";
 export { MdbaseConnection } from "./connection.js";
 export type { MdbaseAuthorizationTarget, MdbaseAuthorizeOptions, MdbaseConnectionAuthorizeOptions, MdbaseConnectEnvironment, MdbaseAuthorizationResult, MdbaseAuthorizationOutcome } from "./connection.js";
-export type { MdbaseConnectionRoute, DirectAccessStatus, MdbaseConnectionInfo, MdbaseAuthorizationCapabilities, MdbaseSyncTransport, MdbaseSyncConnection } from "./connection-types.js";
+export type { MdbaseConnectionRoute, DirectAccessStatus, MdbaseConnectionInfo, MdbaseDeviceAuthorization, MdbaseAuthorizationCapabilities, MdbaseSyncTransport, MdbaseSyncConnection } from "./connection-types.js";
 export { effectiveCapabilities } from "./capabilities.js";
 export type { MdbaseStructuredReadiness } from "./structured-readiness.js";
 export type { MdbaseCapabilityState, MdbaseCapabilityEvidence, MdbaseEffectiveCapability, MdbaseEffectiveCapabilities } from "./capabilities.js";

package/dist/runtime-utils.d.ts

@@ -2,7 +2,10 @@ import type { FileCapability, GrantEncryption, GrantScope } from "@mdbase-dev/co
 import type { MdbaseApplicationManifest as MdbaseAppManifest } from "./application-contract.js";
 import { MdbaseConnectError } from "./errors.js";
 import type { StoredToken } from "./internal-types.js";
-import type { MdbaseDeviceAuthorization } from "./authorization-types.js";
+import type { MdbaseDeviceAuthorization } from "./connection-types.js";
+export declare function connectionIds(storage: Storage, storagePrefix: string): string[];
+export declare function addConnectionId(storage: Storage, storagePrefix: string, collectionId: string): void;
+export declare function removeConnectionId(storage: Storage, storagePrefix: string, collectionId: string): void;
 /** Resolve bundled declarations and their stable storage identity without loading URLs. */
 export declare function resolveManifestSource(input?: MdbaseAppManifest | string | URL, redirect?: string | URL): {
     manifest: MdbaseAppManifest | string;

package/dist/runtime-utils.js

@@ -2,6 +2,24 @@ import { validateGrantEncryption } from "./crypto.js";
 import { connectError, serverConnectError } from "./errors.js";
 import { canonicalJson } from "./operation-helpers.js";
 import { bytesToBase64Url, randomBase64Url } from "./base64.js";
+export function connectionIds(storage, storagePrefix) {
+    const index = parseStored(storage.getItem(`${storagePrefix}:connections`));
+    return index?.version === 1 && Array.isArray(index.collectionIds)
+        && index.collectionIds.every((collectionId) => typeof collectionId === "string")
+        ? index.collectionIds
+        : [];
+}
+export function addConnectionId(storage, storagePrefix, collectionId) {
+    writeConnectionIds(storage, storagePrefix, [...connectionIds(storage, storagePrefix), collectionId]);
+}
+export function removeConnectionId(storage, storagePrefix, collectionId) {
+    writeConnectionIds(storage, storagePrefix, connectionIds(storage, storagePrefix).filter((id) => id !== collectionId));
+}
+function writeConnectionIds(storage, storagePrefix, ids) {
+    storage.setItem(`${storagePrefix}:connections`, JSON.stringify({
+        version: 1, collectionIds: [...new Set(ids)]
+    }));
+}
 /** Resolve bundled declarations and their stable storage identity without loading URLs. */
 export function resolveManifestSource(input, redirect) {
     const manifest = input instanceof URL ? input.href : input ?? defaultManifestSource();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mdbase-dev/connect",
-  "version": "0.1.0-beta.108",
+  "version": "0.1.0-beta.110",
   "private": false,
   "type": "module",
   "license": "MIT",
@@ -33,7 +33,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@mdbase-dev/connect-protocol": "0.1.0-beta.108"
+    "@mdbase-dev/connect-protocol": "0.1.0-beta.110"
   },
   "devDependencies": {
     "esbuild": "^0.28.1",

package/dist/authorization-types.d.ts

@@ -1,7 +0,0 @@
-export interface MdbaseDeviceAuthorization {
-    userCode: string;
-    verificationUri: string;
-    verificationUriComplete: string;
-    expiresAt: number;
-    intervalSeconds: number;
-}

package/dist/authorization-types.js

@@ -1 +0,0 @@
-export {};

package/dist/connection-index.d.ts

@@ -1,3 +0,0 @@
-export declare function connectionIds(storage: Storage, storagePrefix: string): string[];
-export declare function addConnectionId(storage: Storage, storagePrefix: string, collectionId: string): void;
-export declare function removeConnectionId(storage: Storage, storagePrefix: string, collectionId: string): void;

package/dist/connection-index.js

@@ -1,20 +0,0 @@
-import { parseStored } from "./runtime-utils.js";
-export function connectionIds(storage, storagePrefix) {
-    const index = parseStored(storage.getItem(`${storagePrefix}:connections`));
-    return index?.version === 1 && Array.isArray(index.collectionIds)
-        && index.collectionIds.every((collectionId) => typeof collectionId === "string")
-        ? index.collectionIds
-        : [];
-}
-export function addConnectionId(storage, storagePrefix, collectionId) {
-    writeConnectionIds(storage, storagePrefix, [...connectionIds(storage, storagePrefix), collectionId]);
-}
-export function removeConnectionId(storage, storagePrefix, collectionId) {
-    writeConnectionIds(storage, storagePrefix, connectionIds(storage, storagePrefix).filter((id) => id !== collectionId));
-}
-function writeConnectionIds(storage, storagePrefix, ids) {
-    storage.setItem(`${storagePrefix}:connections`, JSON.stringify({
-        version: 1,
-        collectionIds: [...new Set(ids)]
-    }));
-}