@mdbase-dev/connect 0.1.0-beta.125 → 0.1.0-beta.147

package/dist/application-session.d.ts

@@ -1,5 +1,5 @@
 import { type ConnectProblem, type JsonObject, type CollectionOperation } from "@mdbase-dev/connect-protocol";
-import { type MdbaseApplicationManifest as MdbaseAppManifest, type MdbaseApplicationCapabilityId as ApplicationCapabilityId } from "./application-contract.js";
+import { type MdbaseApplicationManifest as MdbaseAppManifest, type MdbaseApplicationCapabilityId as ApplicationCapabilityId } from "@mdbase-dev/connect-protocol";
 import { type ApplicationSessionContext } from "./structured-readiness.js";
 import type { MdbaseAuthorizationOutcome, MdbaseAuthorizeOptions, MdbaseConnection } from "./connection.js";
 import type { MdbaseConnectionInfo } from "./connection-types.js";

package/dist/application-session.js

@@ -1,5 +1,5 @@
 import { APPLICATION_SETUP_OPERATIONS } from "@mdbase-dev/connect-protocol";
-import { declaredOperations, validateAuthorizationSelection } from "./application-contract.js";
+import { declaredOperations, validateAuthorizationSelection } from "@mdbase-dev/connect-protocol";
 import { accessRequirementSatisfied, applicationReadinessContext, collectionSetupInput, publishedStructuredReadiness, reviewableTypePackAdoptions, verifyStructuredReadiness, verificationKey, verificationValue } from "./structured-readiness.js";
 import { MdbaseConnectError, connectProblem } from "./errors.js";
 import { connectFailure, connectSuccess } from "./outcomes.js";

package/dist/async.d.ts

@@ -1 +1,7 @@
 export declare function abortableDelay(milliseconds: number, signal?: AbortSignal): Promise<void>;
+/**
+ * Wait before the next change poll. In a hidden browser tab, wait at least
+ * {@link HIDDEN_POLL_INTERVAL_MS} instead, but return as soon as the tab
+ * becomes visible so a returning user sees current data immediately.
+ */
+export declare function pollDelay(milliseconds: number, signal?: AbortSignal): Promise<void>;

package/dist/async.js

@@ -17,3 +17,42 @@ export function abortableDelay(milliseconds, signal) {
         signal?.addEventListener("abort", abort, { once: true });
     });
 }
+/** How long `watch` waits between polls while the page is hidden. */
+const HIDDEN_POLL_INTERVAL_MS = 60_000;
+/**
+ * Wait before the next change poll. In a hidden browser tab, wait at least
+ * {@link HIDDEN_POLL_INTERVAL_MS} instead, but return as soon as the tab
+ * becomes visible so a returning user sees current data immediately.
+ */
+export function pollDelay(milliseconds, signal) {
+    const page = typeof document === "undefined" ? undefined : document;
+    if (page?.visibilityState !== "hidden")
+        return abortableDelay(milliseconds, signal);
+    return new Promise((resolve, reject) => {
+        if (signal?.aborted) {
+            reject(signal.reason ?? new DOMException("Aborted", "AbortError"));
+            return;
+        }
+        const cleanup = () => {
+            clearTimeout(timeout);
+            page.removeEventListener("visibilitychange", visible);
+            signal?.removeEventListener("abort", abort);
+        };
+        const visible = () => {
+            if (page.visibilityState === "hidden")
+                return;
+            cleanup();
+            resolve();
+        };
+        const abort = () => {
+            cleanup();
+            reject(signal?.reason ?? new DOMException("Aborted", "AbortError"));
+        };
+        const timeout = setTimeout(() => {
+            cleanup();
+            resolve();
+        }, Math.max(milliseconds, HIDDEN_POLL_INTERVAL_MS));
+        page.addEventListener("visibilitychange", visible);
+        signal?.addEventListener("abort", abort, { once: true });
+    });
+}

package/dist/authorization-refresh.d.ts

@@ -11,4 +11,6 @@ interface AuthorizationRefreshOptions {
     storeTokenResponse(body: any, clientId: string, keyHandle?: string): StoredToken;
 }
 export declare function performAuthorizationRefresh(options: AuthorizationRefreshOptions): Promise<StoredToken>;
+/** A refresh refusal that means the stored credential can never work again. */
+export declare function genuineAuthorizationFailure(status: number, code: unknown): boolean;
 export {};

package/dist/authorization-refresh.js

@@ -30,12 +30,24 @@ export async function performAuthorizationRefresh(options) {
         const latest = options.currentToken();
         if (latest?.refreshToken && latest.refreshToken !== attemptedRefreshToken)
             return latest;
+        const code = oauthErrorCode(body) ?? body?.error?.code;
+        // Only a refusal of the credential itself ends this connection. A collection
+        // being upgraded (409), a suspended account, rate limiting or a server fault
+        // leaves the refresh token valid: keep it, so the app recovers by itself.
+        if (!genuineAuthorizationFailure(response.status, code)) {
+            throw apiError(body, "temporarily_unavailable", "mdbase is temporarily unavailable. Try again in a few minutes.", response.status);
+        }
         if (!options.directCapable(current))
             options.removeToken(current.keyHandle);
-        if ((oauthErrorCode(body) ?? body?.error?.code) === "invalid_grant") {
+        if (code === "invalid_grant") {
             throw connectError("authorization_expired", body?.error_description ?? body?.error?.message ?? "Reconnect this application to continue.", { status: response.status });
         }
         throw apiError(body, "authorization_expired", "Reconnect this application to continue.", response.status);
     }
     return options.storeTokenResponse(body, current.clientId, current.keyHandle);
 }
+const AUTHORIZATION_FAILURES = new Set(["invalid_grant", "invalid_client", "unauthorized_client", "invalid_token"]);
+/** A refresh refusal that means the stored credential can never work again. */
+export function genuineAuthorizationFailure(status, code) {
+    return status === 401 || (typeof code === "string" && AUTHORIZATION_FAILURES.has(code));
+}

package/dist/browser/integrity.json

@@ -1,4 +1,4 @@
 {
   "file": "mdbase-connect.min.js",
-  "integrity": "sha384-JJDoYra3MuCFJxyktOaw/6TQwPZCx8ZC2YcJhJxOZqXF8xU67X+tyXiEm5KKZwcf"
+  "integrity": "sha384-rwS4Cs8c/aA1ZdOgYHyRuQz90zVNe1GLeCYRKxXrHsuo777O2T/z+Bu0Mjpf0tBD"
 }