@milaboratories/pl-client 3.9.1 → 3.9.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@milaboratories/pl-client",
-  "version": "3.9.1",
+  "version": "3.9.2",
   "description": "New TS/JS client for Platform API",
   "files": [
     "./dist/**/*",
@@ -31,8 +31,8 @@
     "utility-types": "^3.11.0",
     "yaml": "^2.8.0",
     "@milaboratories/pl-http": "1.2.4",
-    "@milaboratories/pl-model-common": "1.42.0",
-    "@milaboratories/ts-helpers": "1.8.2"
+    "@milaboratories/ts-helpers": "1.8.2",
+    "@milaboratories/pl-model-common": "1.42.0"
   },
   "devDependencies": {
     "@protobuf-ts/plugin": "2.11.1",
@@ -41,9 +41,9 @@
     "openapi-typescript": "^7.10.0",
     "typescript": "~5.9.3",
     "vitest": "^4.1.3",
+    "@milaboratories/build-configs": "2.0.0",
     "@milaboratories/ts-configs": "1.2.3",
-    "@milaboratories/ts-builder": "1.5.0",
-    "@milaboratories/build-configs": "2.0.0"
+    "@milaboratories/ts-builder": "1.5.0"
   },
   "engines": {
     "node": ">=22.19.0"

package/src/core/client.ts

@@ -341,7 +341,7 @@ export class PlClient {
 
         // Auto-set default color proof from the client root's signature.
         // Skip when backend doesn't implement the `set_default_color` TX request.
-        if (this.ll.supportsSetDefaultColor && !isNullSignedResourceId(clientRoot) && writable) {
+        if (this.ll.supportsResourceSignatures && !isNullSignedResourceId(clientRoot) && writable) {
           const parsed = parseSignedResourceId(clientRoot);
           if (parsed.signature) {
             tx.setDefaultColor(parsed.signature as ColorProof);

package/src/core/ll_client.ts

@@ -17,6 +17,7 @@ import { plAddressToConfig, type wireProtocol, SUPPORTED_WIRE_PROTOCOLS } from "
 import type { GrpcOptions } from "@protobuf-ts/grpc-transport";
 import { GrpcTransport } from "@protobuf-ts/grpc-transport";
 import { LLPlTransaction } from "./ll_transaction";
+import { setResourceSignaturesRequired } from "./types";
 import { parsePlJwt } from "../util/pl";
 import { type Dispatcher, interceptors } from "undici";
 import type { Middleware } from "openapi-fetch";
@@ -159,6 +160,9 @@ export class LLPlClient implements WireClientProviderFactory {
     // side-effect in ping(); this fallback covers the path where autodetect is disabled.
     if (!pl._serverInfo) await pl.ping();
 
+    // Install the process-global signature-strictness flag based on backend version.
+    setResourceSignaturesRequired(pl.supportsResourceSignatures);
+
     // Guarantee authMethods happened so client can make weighted decision on which auth method to use.
     if (!pl._authMethodsSync) await pl.authMethods();
 
@@ -679,8 +683,10 @@ export class LLPlClient implements WireClientProviderFactory {
     return hasCapability(this.serverInfo.capabilities, capability);
   }
 
-  /** True if the backend implements the setDefaultColor TX request. */
-  public get supportsSetDefaultColor(): boolean {
+  /** True if the backend produces signed resource ids (and accepts the
+   * setDefaultColor TX request). Tagged at 3.3.0 — backends older than this
+   * return resources without signatures and reject color-proof requests. */
+  public get supportsResourceSignatures(): boolean {
     return isVersionAtLeast(this.serverInfo.coreVersion, [3, 3, 0]);
   }
 

package/src/core/ll_transaction.test.ts

@@ -115,7 +115,7 @@ test("check timeout error type (active)", async () => {
 
     // Set default color so resource creation succeeds in strict mode.
     // Skip on older backends that don't implement the setDefaultColor TX request.
-    if (client.supportsSetDefaultColor) {
+    if (client.supportsResourceSignatures) {
       await tx.send(
         { oneofKind: "setDefaultColor", setDefaultColor: { colorProof: rootSig } },
         false,
@@ -189,7 +189,7 @@ test("check is abort error (active)", async () => {
 
     // Set default color so resource creation succeeds in strict mode
     // Skip on older backends that don't implement the setDefaultColor TX request.
-    if (client.supportsSetDefaultColor) {
+    if (client.supportsResourceSignatures) {
       await tx.send(
         { oneofKind: "setDefaultColor", setDefaultColor: { colorProof: rootSig } },
         false,

package/src/core/types.ts

@@ -298,13 +298,26 @@ export function isSignedResourceId(resourceId: bigint | string): resourceId is S
   return typeof resourceId === "string" && resourceId.includes("|");
 }
 
+// Process-global switch. Set to false by LLPlClient.build() when the connected
+// backend predates resource signatures (~< 3.3.0). When false, asSignedResourceId
+// accepts ids minted with an empty signature. Single-backend-per-process only:
+// a Node process talking to mixed signed/unsigned backends will share last-wins
+// state. Desktop App is single-backend-per-process, so this is acceptable.
+let resourceSignaturesRequired = true;
+
+export function setResourceSignaturesRequired(required: boolean): void {
+  resourceSignaturesRequired = required;
+}
+
 /** Validate a string as a SignedResourceId and return it with the branded type.
- *  Requires the format "<globalId>|<signatureHex>" with a non-empty signature. */
+ *  Requires the format "<globalId>|<signatureHex>". A non-empty signature is
+ *  required only when {@link areResourceSignaturesRequired} is true. */
 export function asSignedResourceId(str: string): SignedResourceId {
   const pipeIdx = str.indexOf("|");
   if (pipeIdx < 0) throw new Error(`Not a signed resource id (no '|' separator): ${str}`);
   if (pipeIdx === 0) throw new Error(`Signed resource id has empty globalId: ${str}`);
-  if (pipeIdx === str.length - 1) throw new Error(`Signed resource id has empty signature: ${str}`);
+  if (resourceSignaturesRequired && pipeIdx === str.length - 1)
+    throw new Error(`Signed resource id has empty signature: ${str}`);
   return str as SignedResourceId;
 }